{"grype_matches":[{"artifact":{"id":"933d3f7a83a3748d","cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:generic/openssl@3.1.3","type":"binary","version":"3.1.3","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/openssl","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/openssl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.7"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6119","versionConstraint":">= 3.0.0, < 3.0.15||>= 3.1.0, < 3.1.7||>= 3.2.0, < 3.2.3||>= 3.3.0, < 3.3.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.1.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-6119","fix":{"state":"fixed","versions":["3.0.15","3.1.7","3.2.3","3.3.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"3.0.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.1.7"},{"date":"2025-09-04","kind":"first-observed","version":"3.2.3"},{"date":"2025-09-04","kind":"first-observed","version":"3.3.2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-6119","date":"2026-10-27","epss":0.66582,"percentile":0.99284}],"risk":49.936499999999995,"urls":["https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f","https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6","https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2","https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0","https://openssl-library.org/news/secadv/20240903.txt","http://www.openwall.com/lists/oss-security/2024/09/03/4","https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html","https://security.netapp.com/advisory/ntap-20240912-0001/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6119","description":"Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2961","versionConstraint":"< 2.35-0ubuntu3.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-2961","fix":{"state":"fixed","versions":["2.35-0ubuntu3.7"],"available":[{"date":"2024-04-18","kind":"advisory","version":"2.35-0ubuntu3.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-27","epss":0.8833,"percentile":0.99768}],"risk":44.165,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2961"},"relatedVulnerabilities":[{"id":"CVE-2024-2961","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.3,"impactScore":4.8,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-27","epss":0.8833,"percentile":0.99768}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/17/9","http://www.openwall.com/lists/oss-security/2024/04/18/4","http://www.openwall.com/lists/oss-security/2024/04/24/2","http://www.openwall.com/lists/oss-security/2024/05/27/1","http://www.openwall.com/lists/oss-security/2024/05/27/2","http://www.openwall.com/lists/oss-security/2024/05/27/3","http://www.openwall.com/lists/oss-security/2024/05/27/4","http://www.openwall.com/lists/oss-security/2024/05/27/5","http://www.openwall.com/lists/oss-security/2024/05/27/6","http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/","https://security.netapp.com/advisory/ntap-20240531-0002/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004","https://www.ambionics.io/blog/iconv-cve-2024-2961-p1","https://www.ambionics.io/blog/iconv-cve-2024-2961-p2","https://www.ambionics.io/blog/iconv-cve-2024-2961-p3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2961","description":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2961","versionConstraint":"< 2.35-0ubuntu3.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-2961","fix":{"state":"fixed","versions":["2.35-0ubuntu3.7"],"available":[{"date":"2024-04-18","kind":"advisory","version":"2.35-0ubuntu3.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-27","epss":0.8833,"percentile":0.99768}],"risk":44.165,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2961"},"relatedVulnerabilities":[{"id":"CVE-2024-2961","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.3,"impactScore":4.8,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-27","epss":0.8833,"percentile":0.99768}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/17/9","http://www.openwall.com/lists/oss-security/2024/04/18/4","http://www.openwall.com/lists/oss-security/2024/04/24/2","http://www.openwall.com/lists/oss-security/2024/05/27/1","http://www.openwall.com/lists/oss-security/2024/05/27/2","http://www.openwall.com/lists/oss-security/2024/05/27/3","http://www.openwall.com/lists/oss-security/2024/05/27/4","http://www.openwall.com/lists/oss-security/2024/05/27/5","http://www.openwall.com/lists/oss-security/2024/05/27/6","http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/","https://security.netapp.com/advisory/ntap-20240531-0002/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004","https://www.ambionics.io/blog/iconv-cve-2024-2961-p1","https://www.ambionics.io/blog/iconv-cve-2024-2961-p2","https://www.ambionics.io/blog/iconv-cve-2024-2961-p3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2961","description":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2961","versionConstraint":"< 2.35-0ubuntu3.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-2961","fix":{"state":"fixed","versions":["2.35-0ubuntu3.7"],"available":[{"date":"2024-04-18","kind":"advisory","version":"2.35-0ubuntu3.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-27","epss":0.8833,"percentile":0.99768}],"risk":44.165,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2961"},"relatedVulnerabilities":[{"id":"CVE-2024-2961","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.3,"impactScore":4.8,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-27","epss":0.8833,"percentile":0.99768}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/17/9","http://www.openwall.com/lists/oss-security/2024/04/18/4","http://www.openwall.com/lists/oss-security/2024/04/24/2","http://www.openwall.com/lists/oss-security/2024/05/27/1","http://www.openwall.com/lists/oss-security/2024/05/27/2","http://www.openwall.com/lists/oss-security/2024/05/27/3","http://www.openwall.com/lists/oss-security/2024/05/27/4","http://www.openwall.com/lists/oss-security/2024/05/27/5","http://www.openwall.com/lists/oss-security/2024/05/27/6","http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/","https://security.netapp.com/advisory/ntap-20240531-0002/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004","https://www.ambionics.io/blog/iconv-cve-2024-2961-p1","https://www.ambionics.io/blog/iconv-cve-2024-2961-p2","https://www.ambionics.io/blog/iconv-cve-2024-2961-p3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2961","description":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.21"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15467","versionConstraint":"< 3.0.2-0ubuntu1.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-15467","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.21"],"available":[{"date":"2026-01-27","kind":"advisory","version":"3.0.2-0ubuntu1.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-15467","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-15467","cwe":"CWE-120","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2025-15467","date":"2026-10-27","epss":0.74793,"percentile":0.99502}],"risk":37.396499999999996,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-15467"},"relatedVulnerabilities":[{"id":"CVE-2025-15467","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15467","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-15467","cwe":"CWE-120","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2025-15467","date":"2026-10-27","epss":0.74793,"percentile":0.99502}],"urls":["https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703","https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9","https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3","https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e","https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc","https://openssl-library.org/news/secadv/20260127.txt","http://www.openwall.com/lists/oss-security/2026/01/27/10","http://www.openwall.com/lists/oss-security/2026/02/25/6","https://access.redhat.com/errata/RHSA-2026:1472","https://access.redhat.com/errata/RHSA-2026:1473","https://access.redhat.com/errata/RHSA-2026:1496","https://access.redhat.com/errata/RHSA-2026:1503","https://access.redhat.com/errata/RHSA-2026:1519","https://access.redhat.com/errata/RHSA-2026:1594","https://access.redhat.com/errata/RHSA-2026:1733","https://access.redhat.com/errata/RHSA-2026:1736","https://access.redhat.com/errata/RHSA-2026:2072","https://access.redhat.com/errata/RHSA-2026:2077","https://access.redhat.com/errata/RHSA-2026:2485","https://access.redhat.com/errata/RHSA-2026:2563","https://access.redhat.com/errata/RHSA-2026:2633","https://access.redhat.com/errata/RHSA-2026:2659","https://access.redhat.com/errata/RHSA-2026:2671","https://access.redhat.com/errata/RHSA-2026:2844","https://access.redhat.com/errata/RHSA-2026:2974","https://access.redhat.com/errata/RHSA-2026:2995","https://access.redhat.com/errata/RHSA-2026:3228","https://access.redhat.com/errata/RHSA-2026:3415","https://access.redhat.com/errata/RHSA-2026:3461","https://access.redhat.com/errata/RHSA-2026:3462","https://access.redhat.com/errata/RHSA-2026:4419","https://access.redhat.com/errata/RHSA-2026:4943","https://access.redhat.com/errata/RHSA-2026:6481","https://access.redhat.com/errata/RHSA-2026:7261","https://access.redhat.com/security/cve/CVE-2025-15467","https://bugzilla.redhat.com/show_bug.cgi?id=2430376","https://cert-portal.siemens.com/productcert/html/ssa-434797.html","https://cert-portal.siemens.com/productcert/html/ssa-734552.html","https://github.com/guiimoraes/CVE-2025-15467","https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15467.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15467","description":"Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with\nmaliciously crafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.21"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-15467","versionConstraint":"< 3.0.2-0ubuntu1.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-15467","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.21"],"available":[{"date":"2026-01-27","kind":"advisory","version":"3.0.2-0ubuntu1.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-15467","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-15467","cwe":"CWE-120","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2025-15467","date":"2026-10-27","epss":0.74793,"percentile":0.99502}],"risk":37.396499999999996,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-15467"},"relatedVulnerabilities":[{"id":"CVE-2025-15467","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15467","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-15467","cwe":"CWE-120","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2025-15467","date":"2026-10-27","epss":0.74793,"percentile":0.99502}],"urls":["https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703","https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9","https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3","https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e","https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc","https://openssl-library.org/news/secadv/20260127.txt","http://www.openwall.com/lists/oss-security/2026/01/27/10","http://www.openwall.com/lists/oss-security/2026/02/25/6","https://access.redhat.com/errata/RHSA-2026:1472","https://access.redhat.com/errata/RHSA-2026:1473","https://access.redhat.com/errata/RHSA-2026:1496","https://access.redhat.com/errata/RHSA-2026:1503","https://access.redhat.com/errata/RHSA-2026:1519","https://access.redhat.com/errata/RHSA-2026:1594","https://access.redhat.com/errata/RHSA-2026:1733","https://access.redhat.com/errata/RHSA-2026:1736","https://access.redhat.com/errata/RHSA-2026:2072","https://access.redhat.com/errata/RHSA-2026:2077","https://access.redhat.com/errata/RHSA-2026:2485","https://access.redhat.com/errata/RHSA-2026:2563","https://access.redhat.com/errata/RHSA-2026:2633","https://access.redhat.com/errata/RHSA-2026:2659","https://access.redhat.com/errata/RHSA-2026:2671","https://access.redhat.com/errata/RHSA-2026:2844","https://access.redhat.com/errata/RHSA-2026:2974","https://access.redhat.com/errata/RHSA-2026:2995","https://access.redhat.com/errata/RHSA-2026:3228","https://access.redhat.com/errata/RHSA-2026:3415","https://access.redhat.com/errata/RHSA-2026:3461","https://access.redhat.com/errata/RHSA-2026:3462","https://access.redhat.com/errata/RHSA-2026:4419","https://access.redhat.com/errata/RHSA-2026:4943","https://access.redhat.com/errata/RHSA-2026:6481","https://access.redhat.com/errata/RHSA-2026:7261","https://access.redhat.com/security/cve/CVE-2025-15467","https://bugzilla.redhat.com/show_bug.cgi?id=2430376","https://cert-portal.siemens.com/productcert/html/ssa-434797.html","https://cert-portal.siemens.com/productcert/html/ssa-734552.html","https://github.com/guiimoraes/CVE-2025-15467","https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15467.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15467","description":"Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with\nmaliciously crafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.18"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-6119","versionConstraint":"< 3.0.2-0ubuntu1.18 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-6119","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.18"],"available":[{"date":"2024-09-03","kind":"advisory","version":"3.0.2-0ubuntu1.18"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-6119","date":"2026-10-27","epss":0.66582,"percentile":0.99284}],"risk":33.291,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-6119"},"relatedVulnerabilities":[{"id":"CVE-2024-6119","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-6119","date":"2026-10-27","epss":0.66582,"percentile":0.99284}],"urls":["https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f","https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6","https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2","https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0","https://openssl-library.org/news/secadv/20240903.txt","http://www.openwall.com/lists/oss-security/2024/09/03/4","https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html","https://security.netapp.com/advisory/ntap-20240912-0001/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6119","description":"Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.18"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-6119","versionConstraint":"< 3.0.2-0ubuntu1.18 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-6119","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.18"],"available":[{"date":"2024-09-03","kind":"advisory","version":"3.0.2-0ubuntu1.18"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-6119","date":"2026-10-27","epss":0.66582,"percentile":0.99284}],"risk":33.291,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-6119"},"relatedVulnerabilities":[{"id":"CVE-2024-6119","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-6119","date":"2026-10-27","epss":0.66582,"percentile":0.99284}],"urls":["https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f","https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6","https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2","https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0","https://openssl-library.org/news/secadv/20240903.txt","http://www.openwall.com/lists/oss-security/2024/09/03/4","https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html","https://security.netapp.com/advisory/ntap-20240912-0001/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6119","description":"Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"933d3f7a83a3748d","cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:generic/openssl@3.1.3","type":"binary","version":"3.1.3","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/openssl","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/openssl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-2511","versionConstraint":">= 1.1.1, < 1.1.1y||>= 3.0.0, < 3.0.14||>= 3.1.0, < 3.1.6||>= 3.2.0, < 3.2.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.1.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-2511","fix":{"state":"fixed","versions":["1.1.1y","3.0.14","3.1.6","3.2.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.1.1y"},{"date":"2025-09-04","kind":"first-observed","version":"3.0.14"},{"date":"2025-09-04","kind":"first-observed","version":"3.1.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.2.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-27","epss":0.52421,"percentile":0.98957}],"risk":28.569444999999998,"urls":["https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce","https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d","https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08","https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640","https://www.openssl.org/news/secadv/20240408.txt","http://www.openwall.com/lists/oss-security/2024/04/08/5","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240503-0013/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-354112.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2511","description":"Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.17"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2511","versionConstraint":"< 3.0.2-0ubuntu1.17 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-2511","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.17"],"available":[{"date":"2024-07-31","kind":"advisory","version":"3.0.2-0ubuntu1.17"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-27","epss":0.52421,"percentile":0.98957}],"risk":15.726299999999998,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2511"},"relatedVulnerabilities":[{"id":"CVE-2024-2511","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-27","epss":0.52421,"percentile":0.98957}],"urls":["https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce","https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d","https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08","https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640","https://www.openssl.org/news/secadv/20240408.txt","http://www.openwall.com/lists/oss-security/2024/04/08/5","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240503-0013/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-354112.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2511","description":"Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.17"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-2511","versionConstraint":"< 3.0.2-0ubuntu1.17 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-2511","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.17"],"available":[{"date":"2024-07-31","kind":"advisory","version":"3.0.2-0ubuntu1.17"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-27","epss":0.52421,"percentile":0.98957}],"risk":15.726299999999998,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2511"},"relatedVulnerabilities":[{"id":"CVE-2024-2511","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-27","epss":0.52421,"percentile":0.98957}],"urls":["https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce","https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d","https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08","https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640","https://www.openssl.org/news/secadv/20240408.txt","http://www.openwall.com/lists/oss-security/2024/04/08/5","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240503-0013/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-354112.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2511","description":"Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue."}]},{"artifact":{"id":"9bfa8bd71796afc6","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-3596","versionConstraint":"< 1.19.2-2ubuntu0.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-3596","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.5"],"available":[{"date":"2025-02-05","kind":"advisory","version":"1.19.2-2ubuntu0.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-27","epss":0.14859,"percentile":0.96678}],"risk":7.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-3596"},"relatedVulnerabilities":[{"id":"CVE-2024-3596","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-27","epss":0.14859,"percentile":0.96678}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/09/4","https://cert-portal.siemens.com/productcert/html/ssa-723487.html","https://cert-portal.siemens.com/productcert/html/ssa-794185.html","https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/","https://datatracker.ietf.org/doc/html/rfc2865","https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014","https://www.blastradius.fail/","https://security.netapp.com/advisory/ntap-20240822-0001/","https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol","https://www.kb.cert.org/vuls/id/456537","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-770770.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-3596","description":"RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature."}]},{"artifact":{"id":"7570e146ba37f512","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-3596","versionConstraint":"< 1.19.2-2ubuntu0.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-3596","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.5"],"available":[{"date":"2025-02-05","kind":"advisory","version":"1.19.2-2ubuntu0.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-27","epss":0.14859,"percentile":0.96678}],"risk":7.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-3596"},"relatedVulnerabilities":[{"id":"CVE-2024-3596","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-27","epss":0.14859,"percentile":0.96678}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/09/4","https://cert-portal.siemens.com/productcert/html/ssa-723487.html","https://cert-portal.siemens.com/productcert/html/ssa-794185.html","https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/","https://datatracker.ietf.org/doc/html/rfc2865","https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014","https://www.blastradius.fail/","https://security.netapp.com/advisory/ntap-20240822-0001/","https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol","https://www.kb.cert.org/vuls/id/456537","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-770770.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-3596","description":"RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature."}]},{"artifact":{"id":"513c46e2da3930be","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-3596","versionConstraint":"< 1.19.2-2ubuntu0.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-3596","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.5"],"available":[{"date":"2025-02-05","kind":"advisory","version":"1.19.2-2ubuntu0.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-27","epss":0.14859,"percentile":0.96678}],"risk":7.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-3596"},"relatedVulnerabilities":[{"id":"CVE-2024-3596","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-27","epss":0.14859,"percentile":0.96678}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/09/4","https://cert-portal.siemens.com/productcert/html/ssa-723487.html","https://cert-portal.siemens.com/productcert/html/ssa-794185.html","https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/","https://datatracker.ietf.org/doc/html/rfc2865","https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014","https://www.blastradius.fail/","https://security.netapp.com/advisory/ntap-20240822-0001/","https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol","https://www.kb.cert.org/vuls/id/456537","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-770770.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-3596","description":"RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature."}]},{"artifact":{"id":"09c4acfd49c598b7","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-3596","versionConstraint":"< 1.19.2-2ubuntu0.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-3596","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.5"],"available":[{"date":"2025-02-05","kind":"advisory","version":"1.19.2-2ubuntu0.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-27","epss":0.14859,"percentile":0.96678}],"risk":7.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-3596"},"relatedVulnerabilities":[{"id":"CVE-2024-3596","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-27","epss":0.14859,"percentile":0.96678}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/09/4","https://cert-portal.siemens.com/productcert/html/ssa-723487.html","https://cert-portal.siemens.com/productcert/html/ssa-794185.html","https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/","https://datatracker.ietf.org/doc/html/rfc2865","https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014","https://www.blastradius.fail/","https://security.netapp.com/advisory/ntap-20240822-0001/","https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol","https://www.kb.cert.org/vuls/id/456537","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-770770.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-3596","description":"RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature."}]},{"artifact":{"id":"bb8300909382e0a4","cpes":["cpe:2.3:a:fedorindutny:ip:2.0.0:*:*:*:*:node.js:*:*"],"name":"ip","purl":"pkg:npm/ip@2.0.0","type":"npm","version":"2.0.0","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/ip/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/ip/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2p57-rm9w-gvfp","versionConstraint":"<=2.0.1 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"ip","version":"2.0.0"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-2p57-rm9w-gvfp","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-29415","cwe":"CWE-918","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-29415","cwe":"CWE-941","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-29415","date":"2026-10-27","epss":0.08279,"percentile":0.94888}],"risk":6.45762,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-29415","https://github.com/indutny/node-ip/issues/150","https://github.com/indutny/node-ip/pull/143","https://github.com/indutny/node-ip/pull/144","https://security.netapp.com/advisory/ntap-20250117-0010"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2p57-rm9w-gvfp","description":"ip SSRF improper categorization in isPublic"},"relatedVulnerabilities":[{"id":"CVE-2024-29415","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-29415","cwe":"CWE-918","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-29415","cwe":"CWE-941","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-29415","date":"2026-10-27","epss":0.08279,"percentile":0.94888}],"urls":["https://github.com/indutny/node-ip/issues/150","https://github.com/indutny/node-ip/pull/143","https://github.com/indutny/node-ip/pull/144","https://security.netapp.com/advisory/ntap-20250117-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-29415","description":"The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2023-42282."}]},{"artifact":{"id":"933d3f7a83a3748d","cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:generic/openssl@3.1.3","type":"binary","version":"3.1.3","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/openssl","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/openssl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.7"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-5535","versionConstraint":">= 1.0.2, < 1.0.2zk||>= 1.1.1, < 1.1.1za||>= 3.0.0, < 3.0.15||>= 3.1.0, < 3.1.7||>= 3.2.0, < 3.2.3||>= 3.3.0, < 3.3.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.1.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-5535","fix":{"state":"fixed","versions":["1.0.2zk","1.1.1za","3.0.15","3.1.7","3.2.3","3.3.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.0.2zk"},{"date":"2025-09-04","kind":"first-observed","version":"1.1.1za"},{"date":"2025-09-04","kind":"first-observed","version":"3.0.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.1.7"},{"date":"2025-09-04","kind":"first-observed","version":"3.2.3"},{"date":"2025-09-04","kind":"first-observed","version":"3.3.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-27","epss":0.05582,"percentile":0.92845}],"risk":5.05171,"urls":["https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37","https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e","https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c","https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c","https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c","https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87","https://www.openssl.org/news/secadv/20240627.txt","http://www.openwall.com/lists/oss-security/2024/06/27/1","http://www.openwall.com/lists/oss-security/2024/06/28/4","http://www.openwall.com/lists/oss-security/2024/08/15/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240712-0005/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-5535","description":"Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \"no overlap\"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available."},"relatedVulnerabilities":[]},{"artifact":{"id":"c08fe2fe58d4c369","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyterlab:4.0.7:*:*:*:*:*:*:*"],"name":"jupyterlab","purl":"pkg:pypi/jupyterlab@4.0.7","type":"python","version":"4.0.7","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.5.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-37w4-hwhx-4rc4","versionConstraint":">=4.0.0,<=4.5.6 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyterlab","version":"4.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-37w4-hwhx-4rc4","fix":{"state":"fixed","versions":["4.5.7"],"available":[{"date":"2026-05-06","kind":"first-observed","version":"4.5.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42266","cwe":"CWE-88","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-42266","cwe":"CWE-602","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-42266","cwe":"CWE-88","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42266","date":"2026-10-27","epss":0.05652,"percentile":0.92927}],"risk":4.606380000000001,"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-37w4-hwhx-4rc4","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.7","https://jupyterhub.readthedocs.io/en/5.2.1/explanation/websecurity.html","https://jupyterlab.readthedocs.io/en/latest/user/extensions.html#extension-manager-implementations","https://nvd.nist.gov/vuln/detail/CVE-2026-42266","https://github.com/pypa/advisory-database/tree/main/vulns/jupyterlab/PYSEC-2026-164.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-37w4-hwhx-4rc4","description":"JupyterLab has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request"},"relatedVulnerabilities":[{"id":"CVE-2026-42266","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42266","cwe":"CWE-88","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-42266","cwe":"CWE-602","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-42266","cwe":"CWE-88","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42266","date":"2026-10-27","epss":0.05652,"percentile":0.92927}],"urls":["https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.7","https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-37w4-hwhx-4rc4","https://jupyterhub.readthedocs.io/en/5.2.1/explanation/websecurity.html","https://jupyterlab.readthedocs.io/en/latest/user/extensions.html#extension-manager-implementations","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/security/cve/CVE-2026-42266","https://bugzilla.redhat.com/show_bug.cgi?id=2477072","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42266.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42266","description":"JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_extensions_uris) is not correctly enforced by JupyterLab. The PyPI Extension Manager was not contained to packages listed on the default PyPI index. This vulnerability is fixed in 4.5.7."}]},{"artifact":{"id":"c50e52f35809729b","cpes":["cpe:2.3:a:sudo:sudo:1.9.9-1ubuntu2.4:*:*:*:*:*:*:*"],"name":"sudo","purl":"pkg:deb/ubuntu/sudo@1.9.9-1ubuntu2.4?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"1.9.9-1ubuntu2.4","language":"","licenses":["BSD-2-Clause","BSD-3-Clause","ISC","Zlib","other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/sudo/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/sudo/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/sudo.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/sudo.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/sudo.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/sudo.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/sudo.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/sudo.list"},{"path":"/var/lib/dpkg/info/sudo.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/sudo.postinst"},{"path":"/var/lib/dpkg/info/sudo.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/sudo.postrm"},{"path":"/var/lib/dpkg/info/sudo.preinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/sudo.preinst"},{"path":"/var/lib/dpkg/info/sudo.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/sudo.prerm"},{"path":"/var/lib/dpkg/info/sudo.shlibs","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/sudo.shlibs"},{"path":"/var/lib/dpkg/info/sudo.triggers","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/sudo.triggers"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.9.9-1ubuntu2.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-32462","versionConstraint":"< 1.9.9-1ubuntu2.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"sudo","version":"1.9.9-1ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-32462","fix":{"state":"fixed","versions":["1.9.9-1ubuntu2.5"],"available":[{"date":"2025-06-30","kind":"advisory","version":"1.9.9-1ubuntu2.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-32462","cwe":"CWE-863","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-32462","date":"2026-10-27","epss":0.04477,"percentile":0.9141}],"risk":3.35775,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-32462"},"relatedVulnerabilities":[{"id":"CVE-2025-32462","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":6.1,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","metrics":{"baseScore":2.8,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32462","cwe":"CWE-863","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-32462","date":"2026-10-27","epss":0.04477,"percentile":0.9141}],"urls":["https://access.redhat.com/security/cve/cve-2025-32462","https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32462","https://explore.alas.aws.amazon.com/CVE-2025-32462.html","https://lists.debian.org/debian-security-announce/2025/msg00118.html","https://security-tracker.debian.org/tracker/CVE-2025-32462","https://ubuntu.com/security/notices/USN-7604-1","https://www.openwall.com/lists/oss-security/2025/06/30/2","https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/","https://www.stratascale.com/vulnerability-alert-CVE-2025-32462-sudo-host","https://www.sudo.ws/releases/changelog/","https://www.sudo.ws/security/advisories/","https://www.sudo.ws/security/advisories/host_any/","https://www.suse.com/security/cve/CVE-2025-32462.html","https://lists.debian.org/debian-lts-announce/2025/06/msg00033.html","https://cert-portal.siemens.com/productcert/html/ssa-585531.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-32462","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45447","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-45447","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-45447","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2026-45447","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-45447","date":"2026-10-27","epss":0.04002,"percentile":0.90481}],"risk":3.0015,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-45447"},"relatedVulnerabilities":[{"id":"CVE-2026-45447","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45447","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2026-45447","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-45447","date":"2026-10-27","epss":0.04002,"percentile":0.90481}],"urls":["https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c","https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8","https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54","https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c","https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e","https://openssl-library.org/news/secadv/20260609.txt","https://access.redhat.com/errata/RHSA-2026:25237","https://access.redhat.com/errata/RHSA-2026:25239","https://access.redhat.com/errata/RHSA-2026:26275","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:34102","https://access.redhat.com/errata/RHSA-2026:35869","https://access.redhat.com/errata/RHSA-2026:36215","https://access.redhat.com/errata/RHSA-2026:36217","https://access.redhat.com/errata/RHSA-2026:39009","https://access.redhat.com/errata/RHSA-2026:39012","https://access.redhat.com/errata/RHSA-2026:39981","https://access.redhat.com/errata/RHSA-2026:44438","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:47737","https://access.redhat.com/errata/RHSA-2026:58563","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:66524","https://access.redhat.com/security/cve/CVE-2026-45447","https://bugzilla.redhat.com/show_bug.cgi?id=2481898","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45447","description":"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-45447","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-45447","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-45447","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2026-45447","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-45447","date":"2026-10-27","epss":0.04002,"percentile":0.90481}],"risk":3.0015,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-45447"},"relatedVulnerabilities":[{"id":"CVE-2026-45447","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45447","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2026-45447","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-45447","date":"2026-10-27","epss":0.04002,"percentile":0.90481}],"urls":["https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c","https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8","https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54","https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c","https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e","https://openssl-library.org/news/secadv/20260609.txt","https://access.redhat.com/errata/RHSA-2026:25237","https://access.redhat.com/errata/RHSA-2026:25239","https://access.redhat.com/errata/RHSA-2026:26275","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:34102","https://access.redhat.com/errata/RHSA-2026:35869","https://access.redhat.com/errata/RHSA-2026:36215","https://access.redhat.com/errata/RHSA-2026:36217","https://access.redhat.com/errata/RHSA-2026:39009","https://access.redhat.com/errata/RHSA-2026:39012","https://access.redhat.com/errata/RHSA-2026:39981","https://access.redhat.com/errata/RHSA-2026:44438","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:47737","https://access.redhat.com/errata/RHSA-2026:58563","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:66524","https://access.redhat.com/security/cve/CVE-2026-45447","https://bugzilla.redhat.com/show_bug.cgi?id=2481898","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45447","description":"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"933d3f7a83a3748d","cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:generic/openssl@3.1.3","type":"binary","version":"3.1.3","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/openssl","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/openssl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.4"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-5363","versionConstraint":">= 3.0.0, < 3.0.12||>= 3.1.0, < 3.1.4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.1.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-5363","fix":{"state":"fixed","versions":["3.0.12","3.1.4"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"3.0.12"},{"date":"2025-09-04","kind":"first-observed","version":"3.1.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5363","cwe":"CWE-684","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2023-5363","date":"2026-10-27","epss":0.03939,"percentile":0.90334}],"risk":2.95425,"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee","https://www.openssl.org/news/secadv/20231024.txt","http://www.openwall.com/lists/oss-security/2023/10/24/1","https://security.netapp.com/advisory/ntap-20231027-0010/","https://security.netapp.com/advisory/ntap-20240201-0003/","https://security.netapp.com/advisory/ntap-20240201-0004/","https://security.netapp.com/advisory/ntap-20241108-0002/","https://www.debian.org/security/2023/dsa-5532","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5363","description":"Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"933d3f7a83a3748d","cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:generic/openssl@3.1.3","type":"binary","version":"3.1.3","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/openssl","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/openssl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.8"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-9143","versionConstraint":">= 1.0.2, < 1.0.2zl||>= 1.1.1, < 1.1.1zb||>= 3.0.0, < 3.0.16||>= 3.1.0, < 3.1.8||>= 3.2.0, < 3.2.4||>= 3.3.0, < 3.3.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.1.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-9143","fix":{"state":"fixed","versions":["1.0.2zl","1.1.1zb","3.0.16","3.1.8","3.2.4","3.3.3"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.0.2zl"},{"date":"2025-09-04","kind":"first-observed","version":"1.1.1zb"},{"date":"2025-09-04","kind":"first-observed","version":"3.0.16"},{"date":"2025-09-04","kind":"first-observed","version":"3.1.8"},{"date":"2025-09-04","kind":"first-observed","version":"3.2.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.3.3"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-27","epss":0.05842,"percentile":0.93132}],"risk":2.7165299999999997,"urls":["https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712","https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700","https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4","https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154","https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a","https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41","https://openssl-library.org/news/secadv/20241016.txt","http://www.openwall.com/lists/oss-security/2024/10/16/1","http://www.openwall.com/lists/oss-security/2024/10/23/1","http://www.openwall.com/lists/oss-security/2024/10/24/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20241101-0001/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9143","description":"Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"3a051e4d549bc671","cpes":["cpe:2.3:a:isaacs:glob:10.3.3:*:*:*:*:node.js:*:*"],"name":"glob","purl":"pkg:npm/glob@10.3.3","type":"npm","version":"10.3.3","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/glob/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/glob/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"10.5.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5j98-mcp5-4vw2","versionConstraint":">=10.2.0,<10.5.0 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"glob","version":"10.3.3"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-5j98-mcp5-4vw2","fix":{"state":"fixed","versions":["10.5.0"],"available":[{"date":"2025-11-19","kind":"first-observed","version":"10.5.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-64756","cwe":"CWE-78","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-64756","date":"2026-10-27","epss":0.0309,"percentile":0.87648}],"risk":2.3175,"urls":["https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2","https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146","https://nvd.nist.gov/vuln/detail/CVE-2025-64756","https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5j98-mcp5-4vw2","description":"glob CLI: Command injection via -c/--cmd executes matches with shell:true"},"relatedVulnerabilities":[{"id":"CVE-2025-64756","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-64756","cwe":"CWE-78","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-64756","date":"2026-10-27","epss":0.0309,"percentile":0.87648}],"urls":["https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f","https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146","https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-64756","description":"Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c <command> <patterns> are used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. This issue has been patched in versions 10.5.0 and 11.1.0."}]},{"artifact":{"id":"a3edcda058553f59","cpes":["cpe:2.3:a:isaacs:glob:10.3.3:*:*:*:*:node.js:*:*"],"name":"glob","purl":"pkg:npm/glob@10.3.3","type":"npm","version":"10.3.3","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/glob/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/glob/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"10.5.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5j98-mcp5-4vw2","versionConstraint":">=10.2.0,<10.5.0 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"glob","version":"10.3.3"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-5j98-mcp5-4vw2","fix":{"state":"fixed","versions":["10.5.0"],"available":[{"date":"2025-11-19","kind":"first-observed","version":"10.5.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-64756","cwe":"CWE-78","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-64756","date":"2026-10-27","epss":0.0309,"percentile":0.87648}],"risk":2.3175,"urls":["https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2","https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146","https://nvd.nist.gov/vuln/detail/CVE-2025-64756","https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5j98-mcp5-4vw2","description":"glob CLI: Command injection via -c/--cmd executes matches with shell:true"},"relatedVulnerabilities":[{"id":"CVE-2025-64756","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-64756","cwe":"CWE-78","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-64756","date":"2026-10-27","epss":0.0309,"percentile":0.87648}],"urls":["https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f","https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146","https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-64756","description":"Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c <command> <patterns> are used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. This issue has been patched in versions 10.5.0 and 11.1.0."}]},{"artifact":{"id":"933d3f7a83a3748d","cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:generic/openssl@3.1.3","type":"binary","version":"3.1.3","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/openssl","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/openssl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.5"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-5678","versionConstraint":">= 1.0.2, < 1.0.2zj||>= 1.1.1, < 1.1.1x||>= 3.0.0, < 3.0.13||>= 3.1.0, < 3.1.5 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.1.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-5678","fix":{"state":"fixed","versions":["1.0.2zj","1.1.1x","3.0.13","3.1.5"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.0.2zj"},{"date":"2025-09-04","kind":"first-observed","version":"1.1.1x"},{"date":"2025-09-04","kind":"first-observed","version":"3.0.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.1.5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-27","epss":0.04459,"percentile":0.91384}],"risk":2.296385,"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6","https://www.openssl.org/news/secadv/20231106.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20231130-0010/","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-128433.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-556635.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5678","description":"Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"fa287c7bb04e1dbb","cpes":["cpe:2.3:a:python:urllib3:2.0.7:*:*:*:*:*:*:*"],"name":"urllib3","purl":"pkg:pypi/urllib3@2.0.7","type":"python","version":"2.0.7","language":"python","licenses":[],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.6.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-38jv-5279-wg99","versionConstraint":">=1.22,<2.6.3 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"urllib3","version":"2.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-38jv-5279-wg99","fix":{"state":"fixed","versions":["2.6.3"],"available":[{"date":"2026-01-08","kind":"first-observed","version":"2.6.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-21441","cwe":"CWE-409","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-21441","cwe":"CWE-409","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-21441","date":"2026-10-27","epss":0.02922,"percentile":0.8697}],"risk":2.29377,"urls":["https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99","https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b","https://nvd.nist.gov/vuln/detail/CVE-2026-21441","https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-38jv-5279-wg99","description":"Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)"},"relatedVulnerabilities":[{"id":"CVE-2026-21441","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-21441","cwe":"CWE-409","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-21441","cwe":"CWE-409","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-21441","date":"2026-10-27","epss":0.02922,"percentile":0.8697}],"urls":["https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b","https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99","https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html","https://access.redhat.com/errata/RHSA-2026:0981","https://access.redhat.com/errata/RHSA-2026:0990","https://access.redhat.com/errata/RHSA-2026:10184","https://access.redhat.com/errata/RHSA-2026:1038","https://access.redhat.com/errata/RHSA-2026:1041","https://access.redhat.com/errata/RHSA-2026:1042","https://access.redhat.com/errata/RHSA-2026:1086","https://access.redhat.com/errata/RHSA-2026:1087","https://access.redhat.com/errata/RHSA-2026:1088","https://access.redhat.com/errata/RHSA-2026:1089","https://access.redhat.com/errata/RHSA-2026:1166","https://access.redhat.com/errata/RHSA-2026:1168","https://access.redhat.com/errata/RHSA-2026:1176","https://access.redhat.com/errata/RHSA-2026:1224","https://access.redhat.com/errata/RHSA-2026:1226","https://access.redhat.com/errata/RHSA-2026:1239","https://access.redhat.com/errata/RHSA-2026:1240","https://access.redhat.com/errata/RHSA-2026:1241","https://access.redhat.com/errata/RHSA-2026:1254","https://access.redhat.com/errata/RHSA-2026:1485","https://access.redhat.com/errata/RHSA-2026:14877","https://access.redhat.com/errata/RHSA-2026:1504","https://access.redhat.com/errata/RHSA-2026:1546","https://access.redhat.com/errata/RHSA-2026:1596","https://access.redhat.com/errata/RHSA-2026:1599","https://access.redhat.com/errata/RHSA-2026:1609","https://access.redhat.com/errata/RHSA-2026:1618","https://access.redhat.com/errata/RHSA-2026:1619","https://access.redhat.com/errata/RHSA-2026:1652","https://access.redhat.com/errata/RHSA-2026:1674","https://access.redhat.com/errata/RHSA-2026:1676","https://access.redhat.com/errata/RHSA-2026:1693","https://access.redhat.com/errata/RHSA-2026:1704","https://access.redhat.com/errata/RHSA-2026:1706","https://access.redhat.com/errata/RHSA-2026:1712","https://access.redhat.com/errata/RHSA-2026:1717","https://access.redhat.com/errata/RHSA-2026:1726","https://access.redhat.com/errata/RHSA-2026:1729","https://access.redhat.com/errata/RHSA-2026:1730","https://access.redhat.com/errata/RHSA-2026:1734","https://access.redhat.com/errata/RHSA-2026:1735","https://access.redhat.com/errata/RHSA-2026:1736","https://access.redhat.com/errata/RHSA-2026:17456","https://access.redhat.com/errata/RHSA-2026:17457","https://access.redhat.com/errata/RHSA-2026:17460","https://access.redhat.com/errata/RHSA-2026:17461","https://access.redhat.com/errata/RHSA-2026:17462","https://access.redhat.com/errata/RHSA-2026:17463","https://access.redhat.com/errata/RHSA-2026:1791","https://access.redhat.com/errata/RHSA-2026:1792","https://access.redhat.com/errata/RHSA-2026:1793","https://access.redhat.com/errata/RHSA-2026:1794","https://access.redhat.com/errata/RHSA-2026:1803","https://access.redhat.com/errata/RHSA-2026:1805","https://access.redhat.com/errata/RHSA-2026:1942","https://access.redhat.com/errata/RHSA-2026:1957","https://access.redhat.com/errata/RHSA-2026:19712","https://access.redhat.com/errata/RHSA-2026:2106","https://access.redhat.com/errata/RHSA-2026:2126","https://access.redhat.com/errata/RHSA-2026:2137","https://access.redhat.com/errata/RHSA-2026:2139","https://access.redhat.com/errata/RHSA-2026:2144","https://access.redhat.com/errata/RHSA-2026:2256","https://access.redhat.com/errata/RHSA-2026:2456","https://access.redhat.com/errata/RHSA-2026:2500","https://access.redhat.com/errata/RHSA-2026:25127","https://access.redhat.com/errata/RHSA-2026:2563","https://access.redhat.com/errata/RHSA-2026:2681","https://access.redhat.com/errata/RHSA-2026:2695","https://access.redhat.com/errata/RHSA-2026:2717","https://access.redhat.com/errata/RHSA-2026:2718","https://access.redhat.com/errata/RHSA-2026:2723","https://access.redhat.com/errata/RHSA-2026:2728","https://access.redhat.com/errata/RHSA-2026:2760","https://access.redhat.com/errata/RHSA-2026:2762","https://access.redhat.com/errata/RHSA-2026:2764","https://access.redhat.com/errata/RHSA-2026:2765","https://access.redhat.com/errata/RHSA-2026:28043","https://access.redhat.com/errata/RHSA-2026:28441","https://access.redhat.com/errata/RHSA-2026:2900","https://access.redhat.com/errata/RHSA-2026:2911","https://access.redhat.com/errata/RHSA-2026:2919","https://access.redhat.com/errata/RHSA-2026:2924","https://access.redhat.com/errata/RHSA-2026:2925","https://access.redhat.com/errata/RHSA-2026:2926","https://access.redhat.com/errata/RHSA-2026:3296","https://access.redhat.com/errata/RHSA-2026:33154","https://access.redhat.com/errata/RHSA-2026:3406","https://access.redhat.com/errata/RHSA-2026:3444","https://access.redhat.com/errata/RHSA-2026:3461","https://access.redhat.com/errata/RHSA-2026:3462","https://access.redhat.com/errata/RHSA-2026:3713","https://access.redhat.com/errata/RHSA-2026:3782","https://access.redhat.com/errata/RHSA-2026:3869","https://access.redhat.com/errata/RHSA-2026:3874","https://access.redhat.com/errata/RHSA-2026:3884","https://access.redhat.com/errata/RHSA-2026:3960","https://access.redhat.com/errata/RHSA-2026:4185","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:4215","https://access.redhat.com/errata/RHSA-2026:4271","https://access.redhat.com/errata/RHSA-2026:4466","https://access.redhat.com/errata/RHSA-2026:4467","https://access.redhat.com/errata/RHSA-2026:44696","https://access.redhat.com/errata/RHSA-2026:51357","https://access.redhat.com/errata/RHSA-2026:5459","https://access.redhat.com/errata/RHSA-2026:61628","https://access.redhat.com/errata/RHSA-2026:6287","https://access.redhat.com/errata/RHSA-2026:6292","https://access.redhat.com/errata/RHSA-2026:8151","https://access.redhat.com/errata/RHSA-2026:8500","https://access.redhat.com/errata/RHSA-2026:8501","https://access.redhat.com/security/cve/CVE-2026-21441","https://bugzilla.redhat.com/show_bug.cgi?id=2427726","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-21441","description":"urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source."}]},{"artifact":{"id":"fd33bcffbac145b9","cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:generic/krb5@1.21.2","type":"binary","version":"1.21.2","language":"","licenses":[],"locations":[{"path":"/opt/conda/lib/libkrb5.so.3.3","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libkrb5.so.3.3","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2007-5894","versionConstraint":"none (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"package":{"name":"krb5","version":"1.21.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2007-5894","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","metrics":{"baseScore":9.3,"impactScore":10.1,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2007-5894","date":"2026-10-27","epss":0.02685,"percentile":0.85763}],"risk":2.2554000000000003,"urls":["http://bugs.gentoo.org/show_bug.cgi?id=199205","http://osvdb.org/44333","http://seclists.org/fulldisclosure/2007/Dec/0176.html","http://seclists.org/fulldisclosure/2007/Dec/0321.html","http://secunia.com/advisories/28636","http://secunia.com/advisories/29457","http://wiki.rpath.com/Advisories:rPSA-2008-0112","http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0112","http://www.novell.com/linux/security/advisories/suse_security_summary_report.html","http://www.securityfocus.com/archive/1/489883/100/0/threaded","http://www.securityfocus.com/bid/26750","https://issues.rpath.com/browse/RPL-2012"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-5894","description":"The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and remote authenticated attack vectors.  NOTE: the original disclosure misidentifies the conditions under which the uninitialized variable is used.  NOTE: the vendor disputes this issue, stating \" The 'length' variable is only uninitialized if 'auth_type' is neither the 'KERBEROS_V4' nor 'GSSAPI'; this condition cannot occur in the unmodified source code."},"relatedVulnerabilities":[]},{"artifact":{"id":"933d3f7a83a3748d","cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:generic/openssl@3.1.3","type":"binary","version":"3.1.3","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/openssl","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/openssl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-4741","versionConstraint":">= 1.1.1, < 1.1.1y||>= 3.0.0, < 3.0.14||>= 3.1.0, < 3.1.6||>= 3.2.0, < 3.2.2||>= 3.3.0, < 3.3.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.1.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-4741","fix":{"state":"fixed","versions":["1.1.1y","3.0.14","3.1.6","3.2.2","3.3.1"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.1.1y"},{"date":"2025-09-04","kind":"first-observed","version":"3.0.14"},{"date":"2025-09-04","kind":"first-observed","version":"3.1.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.2.2"},{"date":"2025-09-04","kind":"first-observed","version":"3.3.1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-27","epss":0.02925,"percentile":0.86987}],"risk":2.19375,"urls":["https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177","https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d","https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac","https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8","https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4","https://www.openssl.org/news/secadv/20240528.txt","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240621-0004/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4741","description":"Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.12"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5363","versionConstraint":"< 3.0.2-0ubuntu1.12 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-5363","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.12"],"available":[{"date":"2023-10-24","kind":"advisory","version":"3.0.2-0ubuntu1.12"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-5363","cwe":"CWE-684","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2023-5363","date":"2026-10-27","epss":0.03939,"percentile":0.90334}],"risk":1.9695,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5363"},"relatedVulnerabilities":[{"id":"CVE-2023-5363","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5363","cwe":"CWE-684","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2023-5363","date":"2026-10-27","epss":0.03939,"percentile":0.90334}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee","https://www.openssl.org/news/secadv/20231024.txt","http://www.openwall.com/lists/oss-security/2023/10/24/1","https://security.netapp.com/advisory/ntap-20231027-0010/","https://security.netapp.com/advisory/ntap-20240201-0003/","https://security.netapp.com/advisory/ntap-20240201-0004/","https://security.netapp.com/advisory/ntap-20241108-0002/","https://www.debian.org/security/2023/dsa-5532","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5363","description":"Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.12"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-5363","versionConstraint":"< 3.0.2-0ubuntu1.12 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-5363","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.12"],"available":[{"date":"2023-10-24","kind":"advisory","version":"3.0.2-0ubuntu1.12"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-5363","cwe":"CWE-684","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2023-5363","date":"2026-10-27","epss":0.03939,"percentile":0.90334}],"risk":1.9695,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5363"},"relatedVulnerabilities":[{"id":"CVE-2023-5363","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5363","cwe":"CWE-684","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2023-5363","date":"2026-10-27","epss":0.03939,"percentile":0.90334}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee","https://www.openssl.org/news/secadv/20231024.txt","http://www.openwall.com/lists/oss-security/2023/10/24/1","https://security.netapp.com/advisory/ntap-20231027-0010/","https://security.netapp.com/advisory/ntap-20240201-0003/","https://security.netapp.com/advisory/ntap-20240201-0004/","https://security.netapp.com/advisory/ntap-20241108-0002/","https://www.debian.org/security/2023/dsa-5532","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5363","description":"Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.12"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-3446","versionConstraint":"< 3.0.2-0ubuntu1.12 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-3446","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.12"],"available":[{"date":"2023-10-24","kind":"advisory","version":"3.0.2-0ubuntu1.12"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-3446","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3446","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3446","date":"2026-10-27","epss":0.06531,"percentile":0.93755}],"risk":1.9593000000000003,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-3446"},"relatedVulnerabilities":[{"id":"CVE-2023-3446","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3446","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3446","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3446","date":"2026-10-27","epss":0.06531,"percentile":0.93755}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23","https://www.openssl.org/news/secadv/20230719.txt","http://www.openwall.com/lists/oss-security/2023/07/19/4","http://www.openwall.com/lists/oss-security/2023/07/19/5","http://www.openwall.com/lists/oss-security/2023/07/19/6","http://www.openwall.com/lists/oss-security/2023/07/31/1","http://www.openwall.com/lists/oss-security/2024/05/16/1","https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230803-0011/","https://cert-portal.siemens.com/productcert/html/ssa-099606.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-556635.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://cert-portal.siemens.com/productcert/html/ssa-943925.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3446","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.12"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-3446","versionConstraint":"< 3.0.2-0ubuntu1.12 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-3446","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.12"],"available":[{"date":"2023-10-24","kind":"advisory","version":"3.0.2-0ubuntu1.12"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-3446","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3446","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3446","date":"2026-10-27","epss":0.06531,"percentile":0.93755}],"risk":1.9593000000000003,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-3446"},"relatedVulnerabilities":[{"id":"CVE-2023-3446","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3446","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3446","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3446","date":"2026-10-27","epss":0.06531,"percentile":0.93755}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23","https://www.openssl.org/news/secadv/20230719.txt","http://www.openwall.com/lists/oss-security/2023/07/19/4","http://www.openwall.com/lists/oss-security/2023/07/19/5","http://www.openwall.com/lists/oss-security/2023/07/19/6","http://www.openwall.com/lists/oss-security/2023/07/31/1","http://www.openwall.com/lists/oss-security/2024/05/16/1","https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230803-0011/","https://cert-portal.siemens.com/productcert/html/ssa-099606.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-556635.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://cert-portal.siemens.com/productcert/html/ssa-943925.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3446","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.19"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-9143","versionConstraint":"< 3.0.2-0ubuntu1.19 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-9143","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.19"],"available":[{"date":"2025-02-20","kind":"advisory","version":"3.0.2-0ubuntu1.19"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-27","epss":0.05842,"percentile":0.93132}],"risk":1.7526,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-9143"},"relatedVulnerabilities":[{"id":"CVE-2024-9143","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-27","epss":0.05842,"percentile":0.93132}],"urls":["https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712","https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700","https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4","https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154","https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a","https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41","https://openssl-library.org/news/secadv/20241016.txt","http://www.openwall.com/lists/oss-security/2024/10/16/1","http://www.openwall.com/lists/oss-security/2024/10/23/1","http://www.openwall.com/lists/oss-security/2024/10/24/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20241101-0001/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9143","description":"Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.19"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-9143","versionConstraint":"< 3.0.2-0ubuntu1.19 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-9143","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.19"],"available":[{"date":"2025-02-20","kind":"advisory","version":"3.0.2-0ubuntu1.19"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-27","epss":0.05842,"percentile":0.93132}],"risk":1.7526,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-9143"},"relatedVulnerabilities":[{"id":"CVE-2024-9143","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-27","epss":0.05842,"percentile":0.93132}],"urls":["https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712","https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700","https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4","https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154","https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a","https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41","https://openssl-library.org/news/secadv/20241016.txt","http://www.openwall.com/lists/oss-security/2024/10/16/1","http://www.openwall.com/lists/oss-security/2024/10/23/1","http://www.openwall.com/lists/oss-security/2024/10/24/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20241101-0001/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9143","description":"Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-7592","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-7592","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-7592","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.6","3.13.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0rc2"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7592","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2024-7592","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7592","date":"2026-10-27","epss":0.02303,"percentile":0.83233}],"risk":1.72725,"urls":["https://github.com/python/cpython/commit/391e5626e3ee5af267b97e37abc7475732e67621","https://github.com/python/cpython/commit/44e458357fca05ca0ae2658d62c8c595b048b5ef","https://github.com/python/cpython/commit/a77ab24427a18bff817025adb03ca920dc3f1a06","https://github.com/python/cpython/commit/b2f11ca7667e4d57c71c1c88b255115f16042d9a","https://github.com/python/cpython/commit/d4ac921a4b081f7f996a5d2b101684b67ba0ed7f","https://github.com/python/cpython/commit/d662e2db2605515a767f88ad48096b8ac623c774","https://github.com/python/cpython/commit/dcc3eaef98cd94d6cb6cb0f44bd1c903d04f33b1","https://github.com/python/cpython/issues/123067","https://github.com/python/cpython/pull/123075","https://mail.python.org/archives/list/security-announce@python.org/thread/HXJAAAALNUNGCQUS2W7WR6GFIZIHFOOK/","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20241018-0006/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7592","description":"There is a LOW severity vulnerability affecting CPython, specifically the\n'http.cookies' standard library module.\n\n\nWhen parsing cookies that contained backslashes for quoted characters in\nthe cookie value, the parser would use an algorithm with quadratic\ncomplexity, resulting in excess CPU resources being used while parsing the\nvalue."},"relatedVulnerabilities":[]},{"artifact":{"id":"fd33bcffbac145b9","cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:generic/krb5@1.21.2","type":"binary","version":"1.21.2","language":"","licenses":[],"locations":[{"path":"/opt/conda/lib/libkrb5.so.3.3","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libkrb5.so.3.3","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.21.3"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.21.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"package":{"name":"krb5","version":"1.21.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.21.3"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.21.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-27","epss":0.01863,"percentile":0.79151}],"risk":1.686015,"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.17"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-5535","versionConstraint":"< 3.0.2-0ubuntu1.17 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-5535","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.17"],"available":[{"date":"2024-07-31","kind":"advisory","version":"3.0.2-0ubuntu1.17"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-27","epss":0.05582,"percentile":0.92845}],"risk":1.6746,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-5535"},"relatedVulnerabilities":[{"id":"CVE-2024-5535","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-27","epss":0.05582,"percentile":0.92845}],"urls":["https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37","https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e","https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c","https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c","https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c","https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87","https://www.openssl.org/news/secadv/20240627.txt","http://www.openwall.com/lists/oss-security/2024/06/27/1","http://www.openwall.com/lists/oss-security/2024/06/28/4","http://www.openwall.com/lists/oss-security/2024/08/15/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240712-0005/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-5535","description":"Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \"no overlap\"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.17"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-5535","versionConstraint":"< 3.0.2-0ubuntu1.17 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-5535","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.17"],"available":[{"date":"2024-07-31","kind":"advisory","version":"3.0.2-0ubuntu1.17"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-27","epss":0.05582,"percentile":0.92845}],"risk":1.6746,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-5535"},"relatedVulnerabilities":[{"id":"CVE-2024-5535","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-27","epss":0.05582,"percentile":0.92845}],"urls":["https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37","https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e","https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c","https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c","https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c","https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87","https://www.openssl.org/news/secadv/20240627.txt","http://www.openwall.com/lists/oss-security/2024/06/27/1","http://www.openwall.com/lists/oss-security/2024/06/28/4","http://www.openwall.com/lists/oss-security/2024/08/15/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240712-0005/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-5535","description":"Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \"no overlap\"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available."}]},{"artifact":{"id":"c3b53ca70a359f02","cpes":["cpe:2.3:a:cryptography.io:cryptography:41.0.4:*:*:*:*:python:*:*","cpe:2.3:a:cryptography.io:cryptography:41.0.4:*:*:*:*:*:*:*"],"name":"cryptography","purl":"pkg:pypi/cryptography@41.0.4","type":"python","version":"41.0.4","language":"python","licenses":["Apache-2.0 OR BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"42.0.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9v9h-cgj8-h64p","versionConstraint":"<42.0.2 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"cryptography","version":"41.0.4"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-9v9h-cgj8-h64p","fix":{"state":"fixed","versions":["42.0.2"],"available":[{"date":"2024-02-17","kind":"first-observed","version":"42.0.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-27","epss":0.03187,"percentile":0.88015}],"risk":1.6731750000000003,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-0727","https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","https://www.openssl.org/news/secadv/20240125.txt","https://github.com/github/advisory-database/pull/3472","https://github.com/openssl/openssl/pull/23362","https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2","https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d","https://security.netapp.com/advisory/ntap-20240208-0006","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9v9h-cgj8-h64p","description":"Null pointer dereference in PKCS12 parsing"},"relatedVulnerabilities":[{"id":"CVE-2024-0727","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-27","epss":0.03187,"percentile":0.88015}],"urls":["https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","https://www.openssl.org/news/secadv/20240125.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240208-0006/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0727","description":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"933d3f7a83a3748d","cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:generic/openssl@3.1.3","type":"binary","version":"3.1.3","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/openssl","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/openssl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.5"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-0727","versionConstraint":">= 1.0.2, < 1.0.2zj||>= 1.1.1, < 1.1.1x||>= 3.0.0, < 3.0.13||>= 3.1.0, < 3.1.5||= 3.2.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.1.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-0727","fix":{"state":"fixed","versions":["1.0.2zj","1.1.1x","3.0.13","3.1.5"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.0.2zj"},{"date":"2025-09-04","kind":"first-observed","version":"1.1.1x"},{"date":"2025-09-04","kind":"first-observed","version":"3.0.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.1.5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-27","epss":0.03187,"percentile":0.88015}],"risk":1.6731750000000003,"urls":["https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","https://www.openssl.org/news/secadv/20240125.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240208-0006/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0727","description":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6232","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6232","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-6232","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.6","3.13.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0rc2"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6232","cwe":"CWE-1333","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2024-6232","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-6232","date":"2026-10-27","epss":0.02203,"percentile":0.82451}],"risk":1.6522500000000002,"urls":["https://github.com/python/cpython/commit/34ddb64d088dd7ccc321f6103d23153256caa5d4","https://github.com/python/cpython/commit/4eaf4891c12589e3c7bdad5f5b076e4c8392dd06","https://github.com/python/cpython/commit/743acbe872485dc18df4d8ab2dc7895187f062c4","https://github.com/python/cpython/commit/7d1f50cd92ff7e10a1c15a8f591dde8a6843a64d","https://github.com/python/cpython/commit/b4225ca91547aa97ed3aca391614afbb255bc877","https://github.com/python/cpython/commit/d449caf8a179e3b954268b3a88eb9170be3c8fbf","https://github.com/python/cpython/commit/ed3a49ea734ada357ff4442996fd4ae71d253373","https://github.com/python/cpython/issues/121285","https://github.com/python/cpython/pull/121286","https://mail.python.org/archives/list/security-announce@python.org/thread/JRYFTPRHZRTLMZLWQEUHZSJXNHM4ACTY/","http://www.openwall.com/lists/oss-security/2024/09/03/5","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20241018-0007/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6232","description":"There is a MEDIUM severity vulnerability affecting CPython.\n\n\n\n\n\nRegular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives."},"relatedVulnerabilities":[]},{"artifact":{"id":"014c7abafa1a885f","cpes":["cpe:2.3:a:python:setuptools:68.2.2:*:*:*:*:*:*:*"],"name":"setuptools","purl":"pkg:pypi/setuptools@68.2.2","type":"python","version":"68.2.2","language":"python","licenses":[],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/setuptools-68.2.2-py3.11.egg-info/PKG-INFO","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/setuptools-68.2.2-py3.11.egg-info/PKG-INFO","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/setuptools-68.2.2-py3.11.egg-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/setuptools-68.2.2-py3.11.egg-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"70.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cx63-2mw6-8hw5","versionConstraint":"<70.0.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"setuptools","version":"68.2.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-cx63-2mw6-8hw5","fix":{"state":"fixed","versions":["70.0.0"],"available":[{"date":"2024-07-16","kind":"first-observed","version":"70.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":7.5},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6345","cwe":"CWE-94","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2024-6345","date":"2026-10-27","epss":0.01939,"percentile":0.80007}],"risk":1.5172675,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-6345","https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0","https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5","https://github.com/pypa/setuptools/pull/4332","https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cx63-2mw6-8hw5","description":"setuptools vulnerable to Command Injection via package URL"},"relatedVulnerabilities":[{"id":"CVE-2024-6345","cvss":[{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6345","cwe":"CWE-94","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2024-6345","date":"2026-10-27","epss":0.01939,"percentile":0.80007}],"urls":["https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0","https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5","https://lists.debian.org/debian-lts-announce/2024/09/msg00018.html","https://github.com/advisories/GHSA-cx63-2mw6-8hw5"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6345","description":"A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0."}]},{"artifact":{"id":"9bfa8bd71796afc6","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-36054","versionConstraint":"< 1.19.2-2ubuntu0.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-36054","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.3"],"available":[{"date":"2023-11-06","kind":"advisory","version":"1.19.2-2ubuntu0.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-27","epss":0.02814,"percentile":0.86467}],"risk":1.407,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-36054"},"relatedVulnerabilities":[{"id":"CVE-2023-36054","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-27","epss":0.02814,"percentile":0.86467}],"urls":["https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd","https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final","https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final","https://lists.debian.org/debian-lts-announce/2023/10/msg00031.html","https://security.netapp.com/advisory/ntap-20230908-0004/","https://web.mit.edu/kerberos/www/advisories/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-36054","description":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."}]},{"artifact":{"id":"7570e146ba37f512","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-36054","versionConstraint":"< 1.19.2-2ubuntu0.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-36054","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.3"],"available":[{"date":"2023-11-06","kind":"advisory","version":"1.19.2-2ubuntu0.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-27","epss":0.02814,"percentile":0.86467}],"risk":1.407,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-36054"},"relatedVulnerabilities":[{"id":"CVE-2023-36054","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-27","epss":0.02814,"percentile":0.86467}],"urls":["https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd","https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final","https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final","https://lists.debian.org/debian-lts-announce/2023/10/msg00031.html","https://security.netapp.com/advisory/ntap-20230908-0004/","https://web.mit.edu/kerberos/www/advisories/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-36054","description":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."}]},{"artifact":{"id":"513c46e2da3930be","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-36054","versionConstraint":"< 1.19.2-2ubuntu0.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-36054","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.3"],"available":[{"date":"2023-11-06","kind":"advisory","version":"1.19.2-2ubuntu0.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-27","epss":0.02814,"percentile":0.86467}],"risk":1.407,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-36054"},"relatedVulnerabilities":[{"id":"CVE-2023-36054","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-27","epss":0.02814,"percentile":0.86467}],"urls":["https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd","https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final","https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final","https://lists.debian.org/debian-lts-announce/2023/10/msg00031.html","https://security.netapp.com/advisory/ntap-20230908-0004/","https://web.mit.edu/kerberos/www/advisories/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-36054","description":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."}]},{"artifact":{"id":"09c4acfd49c598b7","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-36054","versionConstraint":"< 1.19.2-2ubuntu0.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-36054","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.3"],"available":[{"date":"2023-11-06","kind":"advisory","version":"1.19.2-2ubuntu0.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-27","epss":0.02814,"percentile":0.86467}],"risk":1.407,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-36054"},"relatedVulnerabilities":[{"id":"CVE-2023-36054","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-27","epss":0.02814,"percentile":0.86467}],"urls":["https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd","https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final","https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final","https://lists.debian.org/debian-lts-announce/2023/10/msg00031.html","https://security.netapp.com/advisory/ntap-20230908-0004/","https://web.mit.edu/kerberos/www/advisories/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-36054","description":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5678","versionConstraint":"< 3.0.2-0ubuntu1.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-5678","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.14"],"available":[{"date":"2024-02-05","kind":"advisory","version":"3.0.2-0ubuntu1.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-27","epss":0.04459,"percentile":0.91384}],"risk":1.3377,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5678"},"relatedVulnerabilities":[{"id":"CVE-2023-5678","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-27","epss":0.04459,"percentile":0.91384}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6","https://www.openssl.org/news/secadv/20231106.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20231130-0010/","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-128433.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-556635.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5678","description":"Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.14"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-5678","versionConstraint":"< 3.0.2-0ubuntu1.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-5678","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.14"],"available":[{"date":"2024-02-05","kind":"advisory","version":"3.0.2-0ubuntu1.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-27","epss":0.04459,"percentile":0.91384}],"risk":1.3377,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5678"},"relatedVulnerabilities":[{"id":"CVE-2023-5678","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-27","epss":0.04459,"percentile":0.91384}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6","https://www.openssl.org/news/secadv/20231106.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20231130-0010/","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-128433.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-556635.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5678","description":"Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"933d3f7a83a3748d","cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:generic/openssl@3.1.3","type":"binary","version":"3.1.3","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/openssl","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/openssl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.5"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-6129","versionConstraint":">= 3.0.0, < 3.0.13||>= 3.1.0, < 3.1.5||>= 3.2.0, < 3.2.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.1.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-6129","fix":{"state":"fixed","versions":["3.0.13","3.1.5","3.2.1"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"3.0.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.1.5"},{"date":"2025-09-04","kind":"first-observed","version":"3.2.1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6129","cwe":"CWE-440","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-6129","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6129","date":"2026-10-27","epss":0.02323,"percentile":0.83395}],"risk":1.3357249999999998,"urls":["https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35","https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04","https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015","https://www.openssl.org/news/secadv/20240109.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://security.netapp.com/advisory/ntap-20240216-0009/","https://security.netapp.com/advisory/ntap-20240426-0008/","https://security.netapp.com/advisory/ntap-20240426-0013/","https://security.netapp.com/advisory/ntap-20240503-0011/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6129","description":"Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4517","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4517","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4517","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":9.4,"impactScore":5.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4517","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-4517","date":"2026-10-27","epss":0.0143,"percentile":0.72886}],"risk":1.3156,"urls":["https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f","https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4517","description":"Allows arbitrary filesystem writes outside the extraction directory during extraction with filter=\"data\".\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-40735","versionConstraint":"< 3.0.2-0ubuntu1.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2022-40735","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.16"],"available":[{"date":"2024-06-27","kind":"advisory","version":"3.0.2-0ubuntu1.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2022-40735","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-40735","date":"2026-10-27","epss":0.02613,"percentile":0.85342}],"risk":1.3065,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-40735"},"relatedVulnerabilities":[{"id":"CVE-2022-40735","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40735","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-40735","date":"2026-10-27","epss":0.02613,"percentile":0.85342}],"urls":["https://dheatattack.gitlab.io/","https://gist.github.com/c0r0n3r/9455ddcab985c50fd1912eabf26e058b","https://github.com/mozilla/ssl-config-generator/issues/162","https://ieeexplore.ieee.org/document/10374117","https://link.springer.com/content/pdf/10.1007/3-540-68339-9_29.pdf","https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf","https://raw.githubusercontent.com/CVEProject/cvelist/9d7fbbcabd3f44cfedc9e8807757d31ece85a2c6/2022/40xxx/CVE-2022-40735.json","https://www.researchgate.net/profile/Anton-Stiglic-2/publication/2401745_Security_Issues_in_the_Diffie-Hellman_Key_Agreement_Protocol/links/546c144f0cf20dedafd53e7e/Security-Issues-in-the-Diffie-Hellman-Key-Agreement-Protocol.pdf","https://www.rfc-editor.org/rfc/rfc3526","https://www.rfc-editor.org/rfc/rfc4419","https://www.rfc-editor.org/rfc/rfc5114#section-4","https://www.rfc-editor.org/rfc/rfc7919#section-5.2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-40735","description":"The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that \"(appropriately) short exponents\" can be used when there are adequate subgroup constraints, and these short exponents can lead to less expensive calculations than for long exponents. This issue is different from CVE-2002-20001 because it is based on an observation about exponent size, rather than an observation about numbers that are not public keys. The specific situations in which calculation expense would constitute a server-side vulnerability depend on the protocol (e.g., TLS, SSH, or IKE) and the DHE implementation details. In general, there might be an availability concern because of server-side resource consumption from DHE modular-exponentiation calculations. Finally, it is possible for an attacker to exploit this vulnerability and CVE-2002-20001 together."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.16"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-40735","versionConstraint":"< 3.0.2-0ubuntu1.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2022-40735","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.16"],"available":[{"date":"2024-06-27","kind":"advisory","version":"3.0.2-0ubuntu1.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2022-40735","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-40735","date":"2026-10-27","epss":0.02613,"percentile":0.85342}],"risk":1.3065,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-40735"},"relatedVulnerabilities":[{"id":"CVE-2022-40735","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40735","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-40735","date":"2026-10-27","epss":0.02613,"percentile":0.85342}],"urls":["https://dheatattack.gitlab.io/","https://gist.github.com/c0r0n3r/9455ddcab985c50fd1912eabf26e058b","https://github.com/mozilla/ssl-config-generator/issues/162","https://ieeexplore.ieee.org/document/10374117","https://link.springer.com/content/pdf/10.1007/3-540-68339-9_29.pdf","https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf","https://raw.githubusercontent.com/CVEProject/cvelist/9d7fbbcabd3f44cfedc9e8807757d31ece85a2c6/2022/40xxx/CVE-2022-40735.json","https://www.researchgate.net/profile/Anton-Stiglic-2/publication/2401745_Security_Issues_in_the_Diffie-Hellman_Key_Agreement_Protocol/links/546c144f0cf20dedafd53e7e/Security-Issues-in-the-Diffie-Hellman-Key-Agreement-Protocol.pdf","https://www.rfc-editor.org/rfc/rfc3526","https://www.rfc-editor.org/rfc/rfc4419","https://www.rfc-editor.org/rfc/rfc5114#section-4","https://www.rfc-editor.org/rfc/rfc7919#section-5.2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-40735","description":"The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that \"(appropriately) short exponents\" can be used when there are adequate subgroup constraints, and these short exponents can lead to less expensive calculations than for long exponents. This issue is different from CVE-2002-20001 because it is based on an observation about exponent size, rather than an observation about numbers that are not public keys. The specific situations in which calculation expense would constitute a server-side vulnerability depend on the protocol (e.g., TLS, SSH, or IKE) and the DHE implementation details. In general, there might be an availability concern because of server-side resource consumption from DHE modular-exponentiation calculations. Finally, it is possible for an attacker to exploit this vulnerability and CVE-2002-20001 together."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-27043","versionConstraint":"< 3.8.20||>= 3.10.0a0, < 3.10.15||>= 3.11.0a0, < 3.11.10||>= 3.12.0a0, < 3.12.6||>= 3.13.0a0, < 3.13.0a1||>= 3.9.0a0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-27043","versionConstraint":"< 3.8.20||>= 3.10.0a0, < 3.10.15||>= 3.11.0a0, < 3.11.10||>= 3.12.0a0, < 3.12.6||>= 3.13.0a0, < 3.13.0a1||>= 3.9.0a0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-27043","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.6","3.13.0a1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0a1"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0a1"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27043","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-27043","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2023-27043","cwe":"CWE-1286","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-27043","date":"2026-10-27","epss":0.02527,"percentile":0.8481}],"risk":1.3014050000000001,"urls":["http://python.org","https://github.com/python/cpython/issues/102988","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/","https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html","https://security.netapp.com/advisory/ntap-20230601-0003/","http://seclists.org/fulldisclosure/2025/Apr/8","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27043","description":"The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python."},"relatedVulnerabilities":[]},{"artifact":{"id":"933d3f7a83a3748d","cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:generic/openssl@3.1.3","type":"binary","version":"3.1.3","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/openssl","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/openssl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.5"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-6237","versionConstraint":">= 3.0.0, < 3.0.13||>= 3.1.0, < 3.1.5||>= 3.2.0, < 3.2.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.1.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-6237","fix":{"state":"fixed","versions":["3.0.13","3.1.5","3.2.1"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"3.0.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.1.5"},{"date":"2025-09-04","kind":"first-observed","version":"3.2.1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6237","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2023-6237","date":"2026-10-27","epss":0.02303,"percentile":0.83234}],"risk":1.255135,"urls":["https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d","https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a","https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294","https://www.openssl.org/news/secadv/20240115.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://security.netapp.com/advisory/ntap-20240531-0007/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6237","description":"Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"014c7abafa1a885f","cpes":["cpe:2.3:a:python:setuptools:68.2.2:*:*:*:*:*:*:*"],"name":"setuptools","purl":"pkg:pypi/setuptools@68.2.2","type":"python","version":"68.2.2","language":"python","licenses":[],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/setuptools-68.2.2-py3.11.egg-info/PKG-INFO","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/setuptools-68.2.2-py3.11.egg-info/PKG-INFO","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/setuptools-68.2.2-py3.11.egg-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/setuptools-68.2.2-py3.11.egg-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"78.1.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5rjg-fvgr-3xxf","versionConstraint":"<78.1.1 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"setuptools","version":"68.2.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-5rjg-fvgr-3xxf","fix":{"state":"fixed","versions":["78.1.1"],"available":[{"date":"2025-05-22","kind":"first-observed","version":"78.1.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-47273","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-47273","date":"2026-10-27","epss":0.01592,"percentile":0.7556}],"risk":1.20992,"urls":["https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf","https://nvd.nist.gov/vuln/detail/CVE-2025-47273","https://github.com/pypa/setuptools/issues/4946","https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b","https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88","https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html","https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2025-49.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5rjg-fvgr-3xxf","description":"setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write"},"relatedVulnerabilities":[{"id":"CVE-2025-47273","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-47273","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-47273","date":"2026-10-27","epss":0.01592,"percentile":0.7556}],"urls":["https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88","https://github.com/pypa/setuptools/commit/250a6d17978f9f6ac3ac887091f2d32886fbbb0b","https://github.com/pypa/setuptools/issues/4946","https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf","https://lists.debian.org/debian-lts-announce/2025/05/msg00035.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-47273","description":"setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to remote code execution depending on the context. Version 78.1.1 fixes the issue."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-13836","versionConstraint":"< 3.10.20||>= 3.11.0a1, < 3.11.15||>= 3.12.0a1, < 3.12.13||>= 3.13.0a1, < 3.13.11||>= 3.14.0a1, < 3.14.1||>= 3.15.0a1, < 3.15.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-13836","versionConstraint":"< 3.10.20||>= 3.11.0a1, < 3.11.15||>= 3.12.0a1, < 3.12.13||>= 3.13.0a1, < 3.13.11||>= 3.14.0a1, < 3.14.1||>= 3.15.0a1, < 3.15.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-13836","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.11","3.14.1","3.15.0a3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a3"},{"date":"2026-05-07","kind":"first-observed","version":"3.10.20"},{"date":"2026-05-07","kind":"first-observed","version":"3.11.15"},{"date":"2026-05-07","kind":"first-observed","version":"3.12.13"},{"date":"2025-12-10","kind":"first-observed","version":"3.13.11"},{"date":"2025-12-04","kind":"first-observed","version":"3.14.1"},{"date":"2026-04-15","kind":"first-observed","version":"3.15.0a3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13836","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13836","date":"2026-10-27","epss":0.01631,"percentile":0.76103}],"risk":1.17432,"urls":["https://github.com/python/cpython/commit/14b1fdb0a94b96f86fc7b86671ea9582b8676628","https://github.com/python/cpython/commit/289f29b0fe38baf2d7cb5854f4bb573cc34a6a15","https://github.com/python/cpython/commit/4ce27904b597c77d74dd93f2c912676021a99155","https://github.com/python/cpython/commit/5a4c4a033a4a54481be6870aa1896fad732555b5","https://github.com/python/cpython/commit/5dc101675fd22918facbbe0fecdc821502beaaf0","https://github.com/python/cpython/commit/afc40bdd3dd71f343fd9016f6d8eebbacbd6587c","https://github.com/python/cpython/issues/119451","https://github.com/python/cpython/pull/119454","https://mail.python.org/archives/list/security-announce@python.org/thread/OQ6G7MKRQIS3OAREC3HNG3D2DPOU34XO/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-13836","description":"When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS."},"relatedVulnerabilities":[]},{"artifact":{"id":"5d2b2dbb02428e35","cpes":["cpe:2.3:a:bsdutils:bsdutils:1\\:2.37.2-4ubuntu3:*:*:*:*:*:*:*"],"name":"bsdutils","purl":"pkg:deb/ubuntu/bsdutils@1%3A2.37.2-4ubuntu3?arch=amd64&distro=ubuntu-22.04&upstream=util-linux%402.37.2-4ubuntu3","type":"deb","version":"1:2.37.2-4ubuntu3","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/bsdutils/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/bsdutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/bsdutils.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/bsdutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/bsdutils.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/bsdutils.list"}],"upstreams":[{"name":"util-linux","version":"2.37.2-4ubuntu3"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.37.2-4ubuntu3.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.37.2-4ubuntu3.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"util-linux","version":"2.37.2-4ubuntu3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.37.2-4ubuntu3.4"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.37.2-4ubuntu3.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"d4145cf2c4ff445c","cpes":["cpe:2.3:a:libblkid1:libblkid1:2.37.2-4ubuntu3:*:*:*:*:*:*:*"],"name":"libblkid1","purl":"pkg:deb/ubuntu/libblkid1@2.37.2-4ubuntu3?arch=amd64&distro=ubuntu-22.04&upstream=util-linux","type":"deb","version":"2.37.2-4ubuntu3","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libblkid1/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libblkid1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libblkid1:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libblkid1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.37.2-4ubuntu3.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.37.2-4ubuntu3.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"util-linux","version":"2.37.2-4ubuntu3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.37.2-4ubuntu3.4"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.37.2-4ubuntu3.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"5a046a4c49dd48e5","cpes":["cpe:2.3:a:libmount1:libmount1:2.37.2-4ubuntu3:*:*:*:*:*:*:*"],"name":"libmount1","purl":"pkg:deb/ubuntu/libmount1@2.37.2-4ubuntu3?arch=amd64&distro=ubuntu-22.04&upstream=util-linux","type":"deb","version":"2.37.2-4ubuntu3","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmount1/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libmount1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmount1:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libmount1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.37.2-4ubuntu3.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.37.2-4ubuntu3.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"util-linux","version":"2.37.2-4ubuntu3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.37.2-4ubuntu3.4"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.37.2-4ubuntu3.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"7a54b06f57bd70b8","cpes":["cpe:2.3:a:libsmartcols1:libsmartcols1:2.37.2-4ubuntu3:*:*:*:*:*:*:*"],"name":"libsmartcols1","purl":"pkg:deb/ubuntu/libsmartcols1@2.37.2-4ubuntu3?arch=amd64&distro=ubuntu-22.04&upstream=util-linux","type":"deb","version":"2.37.2-4ubuntu3","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsmartcols1/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libsmartcols1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsmartcols1:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libsmartcols1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.37.2-4ubuntu3.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.37.2-4ubuntu3.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"util-linux","version":"2.37.2-4ubuntu3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.37.2-4ubuntu3.4"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.37.2-4ubuntu3.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"20bf0434cc67ede0","cpes":["cpe:2.3:a:libuuid1:libuuid1:2.37.2-4ubuntu3:*:*:*:*:*:*:*"],"name":"libuuid1","purl":"pkg:deb/ubuntu/libuuid1@2.37.2-4ubuntu3?arch=amd64&distro=ubuntu-22.04&upstream=util-linux","type":"deb","version":"2.37.2-4ubuntu3","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libuuid1/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libuuid1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libuuid1:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libuuid1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.37.2-4ubuntu3.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.37.2-4ubuntu3.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"util-linux","version":"2.37.2-4ubuntu3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.37.2-4ubuntu3.4"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.37.2-4ubuntu3.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"ba61e29b519f7c0e","cpes":["cpe:2.3:a:mount:mount:2.37.2-4ubuntu3:*:*:*:*:*:*:*"],"name":"mount","purl":"pkg:deb/ubuntu/mount@2.37.2-4ubuntu3?arch=amd64&distro=ubuntu-22.04&upstream=util-linux","type":"deb","version":"2.37.2-4ubuntu3","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mount/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/mount/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mount.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/mount.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mount.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/mount.list"}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.37.2-4ubuntu3.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.37.2-4ubuntu3.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"util-linux","version":"2.37.2-4ubuntu3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.37.2-4ubuntu3.4"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.37.2-4ubuntu3.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"8c791e651ad0ce02","cpes":["cpe:2.3:a:util-linux:util-linux:2.37.2-4ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:util-linux:util_linux:2.37.2-4ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:util_linux:util-linux:2.37.2-4ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:util_linux:util_linux:2.37.2-4ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:util:util-linux:2.37.2-4ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:util:util_linux:2.37.2-4ubuntu3:*:*:*:*:*:*:*"],"name":"util-linux","purl":"pkg:deb/ubuntu/util-linux@2.37.2-4ubuntu3?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"2.37.2-4ubuntu3","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/util-linux/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/util-linux/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/util-linux.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/util-linux.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/util-linux.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/util-linux.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/util-linux.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/util-linux.list"},{"path":"/var/lib/dpkg/info/util-linux.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/util-linux.postinst"},{"path":"/var/lib/dpkg/info/util-linux.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/util-linux.postrm"},{"path":"/var/lib/dpkg/info/util-linux.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/util-linux.preinst"},{"path":"/var/lib/dpkg/info/util-linux.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/util-linux.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.37.2-4ubuntu3.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.37.2-4ubuntu3.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"util-linux","version":"2.37.2-4ubuntu3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.37.2-4ubuntu3.4"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.37.2-4ubuntu3.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-27","epss":0.02242,"percentile":0.82762}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"680ad1ef8d2de90f","cpes":["cpe:2.3:a:libcmark-gfm-extensions0.29.0.gfm.3:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm-extensions0.29.0.gfm.3:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm_extensions0.29.0.gfm.3:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm_extensions0.29.0.gfm.3:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*"],"name":"libcmark-gfm-extensions0.29.0.gfm.3","purl":"pkg:deb/ubuntu/libcmark-gfm-extensions0.29.0.gfm.3@0.29.0.gfm.3-3?arch=amd64&distro=ubuntu-22.04&upstream=cmark-gfm","type":"deb","version":"0.29.0.gfm.3-3","language":"","licenses":["Apache","BSD-2-clause","CC-BY-SA-4.0","Expat","Unicode"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcmark-gfm-extensions0.29.0.gfm.3/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/libcmark-gfm-extensions0.29.0.gfm.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcmark-gfm-extensions0.29.0.gfm.3:amd64.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/libcmark-gfm-extensions0.29.0.gfm.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cmark-gfm"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-39209","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"cmark-gfm","version":"0.29.0.gfm.3-3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2022-39209","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-39209","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2022-39209","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-39209","date":"2026-10-27","epss":0.02151,"percentile":0.82043}],"risk":1.0755000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-39209"},"relatedVulnerabilities":[{"id":"CVE-2022-39209","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-39209","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2022-39209","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-39209","date":"2026-10-27","epss":0.02151,"percentile":0.82043}],"urls":["https://en.wikipedia.org/wiki/Time_complexity","https://github.com/github/cmark-gfm/commit/9d57d8a23142b316282bdfc954cb0ecda40a8655","https://github.com/github/cmark-gfm/security/advisories/GHSA-cgh3-p57x-9q7q","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIUCZN3PEKUCT2JQYQTYOVIJG2KSD6G7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMGP65NANDVKPDMXMKYO2ZV2H2HZJY4P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEAAAI4OULDYQ2TA3HOXH54PC3DCBFZS/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-39209","description":"cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior to 0.29.0.gfm.6 a polynomial time complexity issue in cmark-gfm's autolink extension may lead to unbounded resource exhaustion and subsequent denial of service. Users may verify the patch by running `python3 -c 'print(\"![l\"* 100000 + \"\\n\")' | ./cmark-gfm -e autolink`, which will resource exhaust on unpatched cmark-gfm but render correctly on patched cmark-gfm. This vulnerability has been patched in 0.29.0.gfm.6. Users are advised to upgrade. Users unable to upgrade should disable the use of the autolink extension."}]},{"artifact":{"id":"15a5ed723d6f6533","cpes":["cpe:2.3:a:libcmark-gfm0.29.0.gfm.3:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm0.29.0.gfm.3:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm0.29.0.gfm.3:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm0.29.0.gfm.3:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*"],"name":"libcmark-gfm0.29.0.gfm.3","purl":"pkg:deb/ubuntu/libcmark-gfm0.29.0.gfm.3@0.29.0.gfm.3-3?arch=amd64&distro=ubuntu-22.04&upstream=cmark-gfm","type":"deb","version":"0.29.0.gfm.3-3","language":"","licenses":["Apache","BSD-2-clause","CC-BY-SA-4.0","Expat","Unicode"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcmark-gfm0.29.0.gfm.3/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/libcmark-gfm0.29.0.gfm.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcmark-gfm0.29.0.gfm.3:amd64.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/libcmark-gfm0.29.0.gfm.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cmark-gfm"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-39209","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"cmark-gfm","version":"0.29.0.gfm.3-3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2022-39209","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-39209","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2022-39209","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-39209","date":"2026-10-27","epss":0.02151,"percentile":0.82043}],"risk":1.0755000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-39209"},"relatedVulnerabilities":[{"id":"CVE-2022-39209","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-39209","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2022-39209","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-39209","date":"2026-10-27","epss":0.02151,"percentile":0.82043}],"urls":["https://en.wikipedia.org/wiki/Time_complexity","https://github.com/github/cmark-gfm/commit/9d57d8a23142b316282bdfc954cb0ecda40a8655","https://github.com/github/cmark-gfm/security/advisories/GHSA-cgh3-p57x-9q7q","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIUCZN3PEKUCT2JQYQTYOVIJG2KSD6G7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMGP65NANDVKPDMXMKYO2ZV2H2HZJY4P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEAAAI4OULDYQ2TA3HOXH54PC3DCBFZS/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-39209","description":"cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior to 0.29.0.gfm.6 a polynomial time complexity issue in cmark-gfm's autolink extension may lead to unbounded resource exhaustion and subsequent denial of service. Users may verify the patch by running `python3 -c 'print(\"![l\"* 100000 + \"\\n\")' | ./cmark-gfm -e autolink`, which will resource exhaust on unpatched cmark-gfm but render correctly on patched cmark-gfm. This vulnerability has been patched in 0.29.0.gfm.6. Users are advised to upgrade. Users unable to upgrade should disable the use of the autolink extension."}]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.34.0-3ubuntu1.3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-48522","versionConstraint":"< 5.34.0-3ubuntu1.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2022-48522","fix":{"state":"fixed","versions":["5.34.0-3ubuntu1.3"],"available":[{"date":"2023-11-27","kind":"advisory","version":"5.34.0-3ubuntu1.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2022-48522","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48522","date":"2026-10-27","epss":0.03463,"percentile":0.88985}],"risk":1.0389000000000002,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-48522"},"relatedVulnerabilities":[{"id":"CVE-2022-48522","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48522","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48522","date":"2026-10-27","epss":0.03463,"percentile":0.88985}],"urls":["https://github.com/Perl/perl5/blob/79a7b254d85a10b65126ad99bf10e70480569d68/sv.c#L16336-L16345","https://security.netapp.com/advisory/ntap-20230915-0008/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://github.com/Perl/perl5/commit/23cca2d1f4544cb47f1124d98c308ce1f31f09a6","https://github.com/Perl/perl5/issues/19147"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-48522","description":"In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4138","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4138","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4138","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4138","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-4138","date":"2026-10-27","epss":0.01385,"percentile":0.72074}],"risk":1.0387499999999998,"urls":["https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f","https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4138","description":"Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links."},"relatedVulnerabilities":[]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-33845","versionConstraint":"< 3.7.3-4ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-33845","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.9"],"available":[{"date":"2026-05-20","kind":"advisory","version":"3.7.3-4ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-33845","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33845","cwe":"CWE-191","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33845","date":"2026-10-27","epss":0.02073,"percentile":0.81354}],"risk":1.0365,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-33845"},"relatedVulnerabilities":[{"id":"CVE-2026-33845","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33845","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33845","cwe":"CWE-191","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33845","date":"2026-10-27","epss":0.02073,"percentile":0.81354}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:34372","https://access.redhat.com/errata/RHSA-2026:36004","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56786","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:56911","https://access.redhat.com/errata/RHSA-2026:57402","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-33845","https://bugzilla.redhat.com/show_bug.cgi?id=2450624","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33845.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33845","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-8088","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-8088","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-8088","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.6","3.13.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0rc2"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:X/RE:L/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-8088","cwe":"CWE-835","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2024-8088","date":"2026-10-27","epss":0.01275,"percentile":0.69775}],"risk":1.0327499999999998,"urls":["https://github.com/python/cpython/commit/0aa1ee22ab6e204e9d3d0e9dd63ea648ed691ef1","https://github.com/python/cpython/commit/2231286d78d328c2f575e0b05b16fe447d1656d6","https://github.com/python/cpython/commit/795f2597a4be988e2bb19b69ff9958e981cb894e","https://github.com/python/cpython/commit/7bc367e464ce50b956dd232c1dfa1cad4e7fb814","https://github.com/python/cpython/commit/7e8883a3f04d308302361aeffc73e0e9837f19d4","https://github.com/python/cpython/commit/8c7348939d8a3ecd79d630075f6be1b0c5b41f64","https://github.com/python/cpython/commit/95b073bddefa6243effa08e131e297c0383e7f6a","https://github.com/python/cpython/commit/962055268ed4f2ca1d717bfc8b6385de50a23ab7","https://github.com/python/cpython/commit/9cd03263100ddb1657826cc4a71470786cab3932","https://github.com/python/cpython/commit/dcc5182f27c1500006a1ef78e10613bb45788dea","https://github.com/python/cpython/commit/e0264a61119d551658d9445af38323ba94fc16db","https://github.com/python/cpython/commit/fc0b8259e693caa8400fa8b6ac1e494e47ea7798","https://github.com/python/cpython/issues/122905","https://github.com/python/cpython/issues/123270","https://github.com/python/cpython/pull/122906","https://mail.python.org/archives/list/security-announce@python.org/thread/GNFCKVI4TCATKQLALJ5SN4L4CSPSMILU/","http://www.openwall.com/lists/oss-security/2024/08/22/1","http://www.openwall.com/lists/oss-security/2024/08/22/4","http://www.openwall.com/lists/oss-security/2024/08/23/1","http://www.openwall.com/lists/oss-security/2024/08/23/2","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20241011-0010/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-8088","description":"There is a HIGH severity vulnerability affecting the CPython \"zipfile\"\nmodule affecting \"zipfile.Path\". Note that the more common API \"zipfile.ZipFile\" class is unaffected.\n\n\n\n\n\nWhen iterating over names of entries in a zip archive (for example, methods\nof \"zipfile.Path\" like \"namelist()\", \"iterdir()\", etc)\nthe process can be put into an infinite loop with a maliciously crafted\nzip archive. This defect applies when reading only metadata or extracting\nthe contents of the zip archive. Programs that are not handling\nuser-controlled zip archives are not affected."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-0727","versionConstraint":"< 3.0.2-0ubuntu1.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-0727","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.14"],"available":[{"date":"2024-02-05","kind":"advisory","version":"3.0.2-0ubuntu1.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-27","epss":0.03187,"percentile":0.88015}],"risk":0.9561,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-0727"},"relatedVulnerabilities":[{"id":"CVE-2024-0727","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-27","epss":0.03187,"percentile":0.88015}],"urls":["https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","https://www.openssl.org/news/secadv/20240125.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240208-0006/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0727","description":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.14"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-0727","versionConstraint":"< 3.0.2-0ubuntu1.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-0727","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.14"],"available":[{"date":"2024-02-05","kind":"advisory","version":"3.0.2-0ubuntu1.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-27","epss":0.03187,"percentile":0.88015}],"risk":0.9561,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-0727"},"relatedVulnerabilities":[{"id":"CVE-2024-0727","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-27","epss":0.03187,"percentile":0.88015}],"urls":["https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","https://www.openssl.org/news/secadv/20240125.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240208-0006/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0727","description":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"9bfa8bd71796afc6","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.19.2-2ubuntu0.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.4"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.19.2-2ubuntu0.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-27","epss":0.01863,"percentile":0.79151}],"risk":0.9315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37371"},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-27","epss":0.01863,"percentile":0.79151}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"7570e146ba37f512","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.19.2-2ubuntu0.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.4"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.19.2-2ubuntu0.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-27","epss":0.01863,"percentile":0.79151}],"risk":0.9315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37371"},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-27","epss":0.01863,"percentile":0.79151}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"513c46e2da3930be","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.19.2-2ubuntu0.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.4"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.19.2-2ubuntu0.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-27","epss":0.01863,"percentile":0.79151}],"risk":0.9315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37371"},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-27","epss":0.01863,"percentile":0.79151}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"09c4acfd49c598b7","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.19.2-2ubuntu0.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.4"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.19.2-2ubuntu0.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-27","epss":0.01863,"percentile":0.79151}],"risk":0.9315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37371"},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-27","epss":0.01863,"percentile":0.79151}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.12"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-3817","versionConstraint":"< 3.0.2-0ubuntu1.12 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-3817","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.12"],"available":[{"date":"2023-10-24","kind":"advisory","version":"3.0.2-0ubuntu1.12"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-3817","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3817","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3817","date":"2026-10-27","epss":0.03047,"percentile":0.87474}],"risk":0.9141,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-3817"},"relatedVulnerabilities":[{"id":"CVE-2023-3817","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3817","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3817","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3817","date":"2026-10-27","epss":0.03047,"percentile":0.87474}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5","https://www.openssl.org/news/secadv/20230731.txt","http://seclists.org/fulldisclosure/2023/Jul/43","http://www.openwall.com/lists/oss-security/2023/07/31/1","http://www.openwall.com/lists/oss-security/2023/09/22/11","http://www.openwall.com/lists/oss-security/2023/09/22/9","http://www.openwall.com/lists/oss-security/2023/11/06/2","https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230818-0014/","https://security.netapp.com/advisory/ntap-20231027-0008/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://cert-portal.siemens.com/productcert/html/ssa-099606.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://cert-portal.siemens.com/productcert/html/ssa-943925.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3817","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the \"-check\" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.12"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-3817","versionConstraint":"< 3.0.2-0ubuntu1.12 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-3817","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.12"],"available":[{"date":"2023-10-24","kind":"advisory","version":"3.0.2-0ubuntu1.12"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-3817","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3817","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3817","date":"2026-10-27","epss":0.03047,"percentile":0.87474}],"risk":0.9141,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-3817"},"relatedVulnerabilities":[{"id":"CVE-2023-3817","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3817","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3817","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3817","date":"2026-10-27","epss":0.03047,"percentile":0.87474}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5","https://www.openssl.org/news/secadv/20230731.txt","http://seclists.org/fulldisclosure/2023/Jul/43","http://www.openwall.com/lists/oss-security/2023/07/31/1","http://www.openwall.com/lists/oss-security/2023/09/22/11","http://www.openwall.com/lists/oss-security/2023/09/22/9","http://www.openwall.com/lists/oss-security/2023/11/06/2","https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230818-0014/","https://security.netapp.com/advisory/ntap-20231027-0008/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://cert-portal.siemens.com/productcert/html/ssa-099606.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://cert-portal.siemens.com/productcert/html/ssa-943925.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3817","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the \"-check\" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.12"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-0938","versionConstraint":"< 3.9.22||>= 3.10.0, < 3.10.17||>= 3.11.0, < 3.11.12||>= 3.12.0, < 3.12.9||>= 3.13.0, < 3.13.2||>= 3.14.0a1, < 3.14.0a5 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.12"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-0938","versionConstraint":"< 3.9.22||>= 3.10.0, < 3.10.17||>= 3.11.0, < 3.11.12||>= 3.12.0, < 3.12.9||>= 3.13.0, < 3.13.2||>= 3.14.0a1, < 3.14.0a5 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-0938","fix":{"state":"fixed","versions":["3.9.22","3.10.17","3.11.12","3.12.9","3.13.2","3.14.0a5"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.22"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.17"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.9"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.2"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0a5"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.22"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.17"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.12"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.9"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.2"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0a5"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-0938","cwe":"CWE-20","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-0938","date":"2026-10-27","epss":0.01556,"percentile":0.75038}],"risk":0.8791399999999999,"urls":["https://github.com/python/cpython/commit/526617ed68cde460236c973e5d0a8bad4de896ba","https://github.com/python/cpython/commit/90e526ae67b172ed7c6c56e7edad36263b0f9403","https://github.com/python/cpython/commit/a7084f6075c9595ba60119ce8c62f1496f50c568","https://github.com/python/cpython/commit/b8b4b713c5f8ec0958c7ef8d29d6711889bc94ab","https://github.com/python/cpython/commit/d89a5f6a6e65511a5f6e0618c4c30a7aa5aba56a","https://github.com/python/cpython/commit/ff4e5c25666f63544071a6b075ae8b25c98b7a32","https://github.com/python/cpython/issues/105704","https://github.com/python/cpython/pull/129418","https://mail.python.org/archives/list/security-announce@python.org/thread/K4EUG6EKV6JYFIC24BASYOZS4M5XOQIB/","https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html","https://security.netapp.com/advisory/ntap-20250314-0002/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-0938","description":"The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.17"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-4741","versionConstraint":"< 3.0.2-0ubuntu1.17 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-4741","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.17"],"available":[{"date":"2024-07-31","kind":"advisory","version":"3.0.2-0ubuntu1.17"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-27","epss":0.02925,"percentile":0.86987}],"risk":0.8775,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-4741"},"relatedVulnerabilities":[{"id":"CVE-2024-4741","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-27","epss":0.02925,"percentile":0.86987}],"urls":["https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177","https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d","https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac","https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8","https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4","https://www.openssl.org/news/secadv/20240528.txt","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240621-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4741","description":"Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.17"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-4741","versionConstraint":"< 3.0.2-0ubuntu1.17 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-4741","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.17"],"available":[{"date":"2024-07-31","kind":"advisory","version":"3.0.2-0ubuntu1.17"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-27","epss":0.02925,"percentile":0.86987}],"risk":0.8775,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-4741"},"relatedVulnerabilities":[{"id":"CVE-2024-4741","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-27","epss":0.02925,"percentile":0.86987}],"urls":["https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177","https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d","https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac","https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8","https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4","https://www.openssl.org/news/secadv/20240528.txt","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240621-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4741","description":"Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"c3b53ca70a359f02","cpes":["cpe:2.3:a:cryptography.io:cryptography:41.0.4:*:*:*:*:python:*:*","cpe:2.3:a:cryptography.io:cryptography:41.0.4:*:*:*:*:*:*:*"],"name":"cryptography","purl":"pkg:pypi/cryptography@41.0.4","type":"python","version":"41.0.4","language":"python","licenses":["Apache-2.0 OR BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"42.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3ww4-gg4f-jr7f","versionConstraint":"<42.0.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"cryptography","version":"41.0.4"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-3ww4-gg4f-jr7f","fix":{"state":"fixed","versions":["42.0.0"],"available":[{"date":"2024-02-06","kind":"first-observed","version":"42.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50782","cwe":"CWE-203","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-50782","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-50782","date":"2026-10-27","epss":0.01118,"percentile":0.65959}],"risk":0.8720400000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-50782","https://access.redhat.com/security/cve/CVE-2023-50782","https://bugzilla.redhat.com/show_bug.cgi?id=2254432","https://github.com/pyca/cryptography/issues/9785","https://www.couchbase.com/alerts"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3ww4-gg4f-jr7f","description":"Python Cryptography package vulnerable to Bleichenbacher timing oracle attack"},"relatedVulnerabilities":[{"id":"CVE-2023-50782","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50782","cwe":"CWE-203","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-50782","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-50782","date":"2026-10-27","epss":0.01118,"percentile":0.65959}],"urls":["https://access.redhat.com/security/cve/CVE-2023-50782","https://bugzilla.redhat.com/show_bug.cgi?id=2254432","https://www.couchbase.com/alerts/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50782","description":"A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data."}]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-31486","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-31486","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-31486","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-31486","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-31486","date":"2026-10-27","epss":0.01742,"percentile":0.77635}],"risk":0.8710000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-31486"},"relatedVulnerabilities":[{"id":"CVE-2023-31486","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-31486","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-31486","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-31486","date":"2026-10-27","epss":0.01742,"percentile":0.77635}],"urls":["http://www.openwall.com/lists/oss-security/2023/04/29/1","http://www.openwall.com/lists/oss-security/2023/05/03/3","http://www.openwall.com/lists/oss-security/2023/05/03/5","http://www.openwall.com/lists/oss-security/2023/05/07/2","https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/","https://github.com/chansen/p5-http-tiny/pull/153","https://hackeriet.github.io/cpan-http-tiny-overview/","https://www.openwall.com/lists/oss-security/2023/04/18/14","https://www.openwall.com/lists/oss-security/2023/05/03/4","https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/","https://security.netapp.com/advisory/ntap-20241129-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-31486","description":"HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates."}]},{"artifact":{"id":"1f8e56f352643db0","cpes":["cpe:2.3:a:libtasn1-6:libtasn1-6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1-6:libtasn1_6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1-6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1_6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1-6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1_6:4.18.0-4build1:*:*:*:*:*:*:*"],"name":"libtasn1-6","purl":"pkg:deb/ubuntu/libtasn1-6@4.18.0-4build1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"4.18.0-4build1","language":"","licenses":["sha256:88a94e40a34bb28145805747cad4018e7eb976b5fd0bf2329dedf90088ebc6e4"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtasn1-6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libtasn1-6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.18.0-4ubuntu0.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-46848","versionConstraint":"< 4.18.0-4ubuntu0.2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"libtasn1-6","version":"4.18.0-4build1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2021-46848","fix":{"state":"fixed","versions":["4.18.0-4ubuntu0.2"],"available":[{"date":"2026-01-12","kind":"advisory","version":"4.18.0-4ubuntu0.2"}]},"cvss":[],"cwes":[{"cve":"CVE-2021-46848","cwe":"CWE-193","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-46848","cwe":"CWE-193","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-46848","date":"2026-10-27","epss":0.02823,"percentile":0.86514}],"risk":0.8469000000000001,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-46848"},"relatedVulnerabilities":[{"id":"CVE-2021-46848","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-46848","cwe":"CWE-193","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-46848","cwe":"CWE-193","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-46848","date":"2026-10-27","epss":0.02823,"percentile":0.86514}],"urls":["https://bugs.gentoo.org/866237","https://gitlab.com/gnutls/libtasn1/-/commit/44a700d2051a666235748970c2df047ff207aeb5","https://gitlab.com/gnutls/libtasn1/-/issues/32","https://lists.debian.org/debian-lts-announce/2023/01/msg00003.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV4SHDJF2XLB4CUPTBPQQ6CLGZ5LKXPZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECM2ELTVRYV4BZ5L5GMIRQE27RFHPAQ6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGO7XST4EIJGX4B2ITZCYSWM24534BSU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V5LWOGF7QRMNFRUCZY6TDYQJVFI6MOQ2/","https://security.netapp.com/advisory/ntap-20221118-0006/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-46848","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der."}]},{"artifact":{"id":"fd33bcffbac145b9","cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:generic/krb5@1.21.2","type":"binary","version":"1.21.2","language":"","licenses":[],"locations":[{"path":"/opt/conda/lib/libkrb5.so.3.3","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libkrb5.so.3.3","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-26461","versionConstraint":"= 1.21.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"package":{"name":"krb5","version":"1.21.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-26461","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-27","epss":0.01128,"percentile":0.66179}],"risk":0.8460000000000001,"urls":["https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md","https://security.netapp.com/advisory/ntap-20240415-0011/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26461","description":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5156","versionConstraint":"< 2.35-0ubuntu3.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-5156","fix":{"state":"fixed","versions":["2.35-0ubuntu3.5"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.35-0ubuntu3.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-5156","cwe":"CWE-401","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5156","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5156","date":"2026-10-27","epss":0.01626,"percentile":0.7603}],"risk":0.8130000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5156"},"relatedVulnerabilities":[{"id":"CVE-2023-5156","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5156","cwe":"CWE-401","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5156","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5156","date":"2026-10-27","epss":0.01626,"percentile":0.7603}],"urls":["https://access.redhat.com/security/cve/CVE-2023-5156","https://bugzilla.redhat.com/show_bug.cgi?id=2240541","https://sourceware.org/bugzilla/show_bug.cgi?id=30884","https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=ec6b95c3303c700eb89eebeda2d7264cc184a796","http://www.openwall.com/lists/oss-security/2023/10/03/4","http://www.openwall.com/lists/oss-security/2023/10/03/5","http://www.openwall.com/lists/oss-security/2023/10/03/6","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://security.gentoo.org/glsa/202402-01","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-831302.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5156","description":"A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5156","versionConstraint":"< 2.35-0ubuntu3.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-5156","fix":{"state":"fixed","versions":["2.35-0ubuntu3.5"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.35-0ubuntu3.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-5156","cwe":"CWE-401","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5156","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5156","date":"2026-10-27","epss":0.01626,"percentile":0.7603}],"risk":0.8130000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5156"},"relatedVulnerabilities":[{"id":"CVE-2023-5156","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5156","cwe":"CWE-401","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5156","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5156","date":"2026-10-27","epss":0.01626,"percentile":0.7603}],"urls":["https://access.redhat.com/security/cve/CVE-2023-5156","https://bugzilla.redhat.com/show_bug.cgi?id=2240541","https://sourceware.org/bugzilla/show_bug.cgi?id=30884","https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=ec6b95c3303c700eb89eebeda2d7264cc184a796","http://www.openwall.com/lists/oss-security/2023/10/03/4","http://www.openwall.com/lists/oss-security/2023/10/03/5","http://www.openwall.com/lists/oss-security/2023/10/03/6","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://security.gentoo.org/glsa/202402-01","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-831302.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5156","description":"A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5156","versionConstraint":"< 2.35-0ubuntu3.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-5156","fix":{"state":"fixed","versions":["2.35-0ubuntu3.5"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.35-0ubuntu3.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-5156","cwe":"CWE-401","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5156","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5156","date":"2026-10-27","epss":0.01626,"percentile":0.7603}],"risk":0.8130000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5156"},"relatedVulnerabilities":[{"id":"CVE-2023-5156","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5156","cwe":"CWE-401","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5156","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5156","date":"2026-10-27","epss":0.01626,"percentile":0.7603}],"urls":["https://access.redhat.com/security/cve/CVE-2023-5156","https://bugzilla.redhat.com/show_bug.cgi?id=2240541","https://sourceware.org/bugzilla/show_bug.cgi?id=30884","https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=ec6b95c3303c700eb89eebeda2d7264cc184a796","http://www.openwall.com/lists/oss-security/2023/10/03/4","http://www.openwall.com/lists/oss-security/2023/10/03/5","http://www.openwall.com/lists/oss-security/2023/10/03/6","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://security.gentoo.org/glsa/202402-01","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-831302.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5156","description":"A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-4032","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.4||>= 3.13.0a1, < 3.13.0a6||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-4032","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.4||>= 3.13.0a1, < 3.13.0a6||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-4032","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.4","3.13.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0a6"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0a6"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4032","cwe":"CWE-697","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-4032","date":"2026-10-27","epss":0.01079,"percentile":0.64897}],"risk":0.8092499999999999,"urls":["http://www.openwall.com/lists/oss-security/2024/06/17/3","https://github.com/python/cpython/commit/22adf29da8d99933ffed8647d3e0726edd16f7f8","https://github.com/python/cpython/commit/40d75c2b7f5c67e254d0a025e0f2e2c7ada7f69f","https://github.com/python/cpython/commit/895f7e2ac23eff4743143beef0f0c5ac71ea27d3","https://github.com/python/cpython/commit/ba431579efdcbaed7a96f2ac4ea0775879a332fb","https://github.com/python/cpython/commit/c62c9e518b784fe44432a3f4fc265fb95b651906","https://github.com/python/cpython/commit/f86b17ac511e68192ba71f27e752321a3252cee3","https://github.com/python/cpython/issues/113171","https://github.com/python/cpython/pull/113179","https://mail.python.org/archives/list/security-announce@python.org/thread/NRUHDUS2IV2USIZM2CVMSFL6SCKU3RZA/","https://security.netapp.com/advisory/ntap-20240726-0004/","https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml","https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4032","description":"The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries.\n\nCPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior."},"relatedVulnerabilities":[]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-0553","versionConstraint":"< 3.7.3-4ubuntu1.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-0553","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.4"],"available":[{"date":"2024-01-22","kind":"advisory","version":"3.7.3-4ubuntu1.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-0553","cwe":"CWE-203","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2024-0553","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-0553","date":"2026-10-27","epss":0.01614,"percentile":0.75855}],"risk":0.807,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-0553"},"relatedVulnerabilities":[{"id":"CVE-2024-0553","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0553","cwe":"CWE-203","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2024-0553","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-0553","date":"2026-10-27","epss":0.01614,"percentile":0.75855}],"urls":["https://access.redhat.com/errata/RHSA-2024:0533","https://access.redhat.com/errata/RHSA-2024:0627","https://access.redhat.com/errata/RHSA-2024:0796","https://access.redhat.com/errata/RHSA-2024:1082","https://access.redhat.com/errata/RHSA-2024:1108","https://access.redhat.com/errata/RHSA-2024:1383","https://access.redhat.com/errata/RHSA-2024:2094","https://access.redhat.com/security/cve/CVE-2024-0553","https://bugzilla.redhat.com/show_bug.cgi?id=2258412","https://gitlab.com/gnutls/gnutls/-/issues/1522","https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html","http://www.openwall.com/lists/oss-security/2024/01/19/3","https://lists.debian.org/debian-lts-announce/2024/02/msg00010.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/","https://security.netapp.com/advisory/ntap-20240202-0011/","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0553","description":"A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.29"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63076","versionConstraint":"< 3.0.2-0ubuntu1.29 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-63076","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.29"],"available":[{"date":"2026-08-25","kind":"advisory","version":"3.0.2-0ubuntu1.29"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-63076","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63076","date":"2026-10-27","epss":0.01602,"percentile":0.75685}],"risk":0.8009999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-63076"},"relatedVulnerabilities":[{"id":"CVE-2026-63076","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63076","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63076","date":"2026-10-27","epss":0.01602,"percentile":0.75685}],"urls":["https://github.com/openssl/openssl/commit/37882aa2e0256e1072442a8f62f7db45b995c45b","https://github.com/openssl/openssl/commit/a17cc8d612ecff6d94a9b7ca8b5283ddf5ff570e","https://github.com/openssl/openssl/commit/a1f348ccb328c3afbd4ba6883f9b7c813c043259","https://github.com/openssl/openssl/commit/a7af46a92d0ce19a90e669ef56d2576a07924226","https://github.com/openssl/openssl/commit/cdacfff557389abfa9e4615abded2ec984517d6c","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63076","description":"Issue summary: OpenSSL CMP password based protection verification only\nchecks whether the protectionAlg parameter was not NULL and not its\nASN.1 type, before treating it as a PBMParameter. A crafted message can\ncontain a parameter of a different type, which is then dereferenced as an\ninvalid pointer.\n\nImpact summary: A remote, unauthenticated attacker can crash an application\nacting as a CMP server that accepts PBM-protected messages, or a CMP client\ntalking to a malicious or intercepted CMP server, resulting in a Denial of\nService.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: When verifying the password-based MAC protection of a CMP\nmessage, OpenSSL library reads the protectionAlg algorithm parameter with\nX509_ALGOR_get0(), which returns both the parameter type and its value\npointer. The value is then cast to an ASN1_STRING and treated as the\nexpected PBMParameter after only checking that pointer is not NULL. The\nparameter type returned by X509_ALGOR_get0() was never consulted.\n\nThis happens during protection verification, before any MAC is computed, so\nno knowledge of the PBM shared secret is required; the only precondition is\nthat PBM verification is reachable. On the server side this is reached from\nOSSL_CMP_SRV_process_request() for any application that stands up a CMP\nserver accepting PBM-protected messages, and on the client side from CMP\nresponse validation against a malicious or on-path (MITM) server. The\nreliable consequence is a denial of service; there is no memory disclosure,\nno controlled memory write, and no path to code execution. CMP is a\nspecialized feature that an application must explicitly enable.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.29"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-63076","versionConstraint":"< 3.0.2-0ubuntu1.29 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-63076","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.29"],"available":[{"date":"2026-08-25","kind":"advisory","version":"3.0.2-0ubuntu1.29"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-63076","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63076","date":"2026-10-27","epss":0.01602,"percentile":0.75685}],"risk":0.8009999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-63076"},"relatedVulnerabilities":[{"id":"CVE-2026-63076","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63076","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63076","date":"2026-10-27","epss":0.01602,"percentile":0.75685}],"urls":["https://github.com/openssl/openssl/commit/37882aa2e0256e1072442a8f62f7db45b995c45b","https://github.com/openssl/openssl/commit/a17cc8d612ecff6d94a9b7ca8b5283ddf5ff570e","https://github.com/openssl/openssl/commit/a1f348ccb328c3afbd4ba6883f9b7c813c043259","https://github.com/openssl/openssl/commit/a7af46a92d0ce19a90e669ef56d2576a07924226","https://github.com/openssl/openssl/commit/cdacfff557389abfa9e4615abded2ec984517d6c","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63076","description":"Issue summary: OpenSSL CMP password based protection verification only\nchecks whether the protectionAlg parameter was not NULL and not its\nASN.1 type, before treating it as a PBMParameter. A crafted message can\ncontain a parameter of a different type, which is then dereferenced as an\ninvalid pointer.\n\nImpact summary: A remote, unauthenticated attacker can crash an application\nacting as a CMP server that accepts PBM-protected messages, or a CMP client\ntalking to a malicious or intercepted CMP server, resulting in a Denial of\nService.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: When verifying the password-based MAC protection of a CMP\nmessage, OpenSSL library reads the protectionAlg algorithm parameter with\nX509_ALGOR_get0(), which returns both the parameter type and its value\npointer. The value is then cast to an ASN1_STRING and treated as the\nexpected PBMParameter after only checking that pointer is not NULL. The\nparameter type returned by X509_ALGOR_get0() was never consulted.\n\nThis happens during protection verification, before any MAC is computed, so\nno knowledge of the PBM shared secret is required; the only precondition is\nthat PBM verification is reachable. On the server side this is reached from\nOSSL_CMP_SRV_process_request() for any application that stands up a CMP\nserver accepting PBM-protected messages, and on the client side from CMP\nresponse validation against a malicious or on-path (MITM) server. The\nreliable consequence is a denial of service; there is no memory disclosure,\nno controlled memory write, and no path to code execution. CMP is a\nspecialized feature that an application must explicitly enable.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."}]},{"artifact":{"id":"e619a3bd38c3d092","cpes":["cpe:2.3:a:kjd:internationalized_domain_names_in_applications:3.4:*:*:*:*:python:*:*"],"name":"idna","purl":"pkg:pypi/idna@3.4","type":"python","version":"3.4","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/idna-3.4.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/idna-3.4.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/idna-3.4.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/idna-3.4.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/idna-3.4.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/idna-3.4.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-jjg7-2v4v-x38h","versionConstraint":"<3.7 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"idna","version":"3.4"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-jjg7-2v4v-x38h","fix":{"state":"fixed","versions":["3.7"],"available":[{"date":"2024-04-12","kind":"first-observed","version":"3.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3651","cwe":"CWE-1333","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2024-3651","date":"2026-10-27","epss":0.01386,"percentile":0.7208}],"risk":0.800415,"urls":["https://github.com/kjd/idna/security/advisories/GHSA-jjg7-2v4v-x38h","https://nvd.nist.gov/vuln/detail/CVE-2024-3651","https://github.com/kjd/idna/commit/1d365e17e10d72d0b7876316fc7b9ca0eebdd38d","https://huntr.com/bounties/93d78d07-d791-4b39-a845-cbfabc44aadb","https://github.com/pypa/advisory-database/tree/main/vulns/idna/PYSEC-2024-60.yaml","https://lists.debian.org/debian-lts-announce/2024/05/msg00006.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F2S5E23N6E52S46KGNYTDFB75LOC4N4D","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S5IDLLD2IKSIVRBSLB34WTSYGLMWUFWF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULSC7HBJKXB3BZV367WM5BR6DFEC4Z43","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4YQUPYH3SVZ5GFF2CDQ55FCM575AZTF2"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-jjg7-2v4v-x38h","description":"Internationalized Domain Names in Applications (IDNA) vulnerable to denial of service from specially crafted inputs to idna.encode"},"relatedVulnerabilities":[{"id":"CVE-2024-3651","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3651","cwe":"CWE-1333","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2024-3651","date":"2026-10-27","epss":0.01386,"percentile":0.7208}],"urls":["https://github.com/kjd/idna/commit/1d365e17e10d72d0b7876316fc7b9ca0eebdd38d","https://huntr.com/bounties/93d78d07-d791-4b39-a845-cbfabc44aadb","https://lists.debian.org/debian-lts-announce/2024/05/msg00006.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4YQUPYH3SVZ5GFF2CDQ55FCM575AZTF2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F2S5E23N6E52S46KGNYTDFB75LOC4N4D/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S5IDLLD2IKSIVRBSLB34WTSYGLMWUFWF/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULSC7HBJKXB3BZV367WM5BR6DFEC4Z43/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-3651","description":"A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size."}]},{"artifact":{"id":"9d60751a9fbaf207","cpes":["cpe:2.3:a:python_tornado_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:tornado:6.3.3:*:*:*:*:*:*:*"],"name":"tornado","purl":"pkg:pypi/tornado@6.3.3","type":"python","version":"6.3.3","language":"python","licenses":["Apache-2.0"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"6.4.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8w49-h785-mj3c","versionConstraint":"<=6.4.1 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"tornado","version":"6.3.3"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-8w49-h785-mj3c","fix":{"state":"fixed","versions":["6.4.2"],"available":[{"date":"2024-11-25","kind":"first-observed","version":"6.4.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-52804","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-52804","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-52804","date":"2026-10-27","epss":0.01044,"percentile":0.63969}],"risk":0.783,"urls":["https://github.com/tornadoweb/tornado/security/advisories/GHSA-8w49-h785-mj3c","https://nvd.nist.gov/vuln/detail/CVE-2024-52804","https://github.com/tornadoweb/tornado/commit/d5ba4a1695fbf7c6a3e54313262639b198291533","https://lists.debian.org/debian-lts-announce/2025/01/msg00000.html"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8w49-h785-mj3c","description":"Tornado has an HTTP cookie parsing DoS vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-52804","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-52804","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-52804","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-52804","date":"2026-10-27","epss":0.01044,"percentile":0.63969}],"urls":["https://github.com/advisories/GHSA-7pwv-g7hj-39pr","https://github.com/tornadoweb/tornado/commit/d5ba4a1695fbf7c6a3e54313262639b198291533","https://github.com/tornadoweb/tornado/security/advisories/GHSA-8w49-h785-mj3c","https://lists.debian.org/debian-lts-announce/2025/01/msg00000.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-52804","description":"Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in the event loop thread and may block the processing of other requests. Version 6.4.2 fixes the issue."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.20"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-9230","versionConstraint":"< 3.0.2-0ubuntu1.20 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-9230","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.20"],"available":[{"date":"2025-09-30","kind":"advisory","version":"3.0.2-0ubuntu1.20"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-9230","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-9230","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9230","date":"2026-10-27","epss":0.01554,"percentile":0.7502}],"risk":0.777,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-9230"},"relatedVulnerabilities":[{"id":"CVE-2025-9230","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9230","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-9230","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9230","date":"2026-10-27","epss":0.01554,"percentile":0.7502}],"urls":["https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45","https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280","https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def","https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd","https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482","https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3","https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba","https://openssl-library.org/news/secadv/20250930.txt","http://www.openwall.com/lists/oss-security/2025/09/30/5","https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-089022.html","https://cert-portal.siemens.com/productcert/html/ssa-253495.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-485750.html","https://cert-portal.siemens.com/productcert/html/ssa-585531.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9230","description":"Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.20"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-9230","versionConstraint":"< 3.0.2-0ubuntu1.20 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-9230","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.20"],"available":[{"date":"2025-09-30","kind":"advisory","version":"3.0.2-0ubuntu1.20"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-9230","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-9230","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9230","date":"2026-10-27","epss":0.01554,"percentile":0.7502}],"risk":0.777,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-9230"},"relatedVulnerabilities":[{"id":"CVE-2025-9230","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9230","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-9230","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9230","date":"2026-10-27","epss":0.01554,"percentile":0.7502}],"urls":["https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45","https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280","https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def","https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd","https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482","https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3","https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba","https://openssl-library.org/news/secadv/20250930.txt","http://www.openwall.com/lists/oss-security/2025/09/30/5","https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-089022.html","https://cert-portal.siemens.com/productcert/html/ssa-253495.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-485750.html","https://cert-portal.siemens.com/productcert/html/ssa-585531.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9230","description":"Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-32988","versionConstraint":"< 3.7.3-4ubuntu1.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-32988","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.7"],"available":[{"date":"2025-07-14","kind":"advisory","version":"3.7.3-4ubuntu1.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-32988","cwe":"CWE-415","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32988","date":"2026-10-27","epss":0.01475,"percentile":0.73693}],"risk":0.7374999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-32988"},"relatedVulnerabilities":[{"id":"CVE-2025-32988","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32988","cwe":"CWE-415","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32988","date":"2026-10-27","epss":0.01475,"percentile":0.73693}],"urls":["https://access.redhat.com/errata/RHSA-2025:16115","https://access.redhat.com/errata/RHSA-2025:16116","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:17348","https://access.redhat.com/errata/RHSA-2025:17361","https://access.redhat.com/errata/RHSA-2025:17415","https://access.redhat.com/errata/RHSA-2025:19088","https://access.redhat.com/errata/RHSA-2025:22529","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/security/cve/CVE-2025-32988","https://bugzilla.redhat.com/show_bug.cgi?id=2359622","https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html","http://www.openwall.com/lists/oss-security/2025/07/11/3","https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-32988","description":"A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not own, leading to a double-free condition when the parent function or caller later attempts to free the same structure.\n\nThis vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or memory corruption, depending on allocator behavior."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-32989","versionConstraint":"< 3.7.3-4ubuntu1.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-32989","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.7"],"available":[{"date":"2025-07-14","kind":"advisory","version":"3.7.3-4ubuntu1.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-32989","cwe":"CWE-295","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32989","date":"2026-10-27","epss":0.01467,"percentile":0.73562}],"risk":0.7335,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-32989"},"relatedVulnerabilities":[{"id":"CVE-2025-32989","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32989","cwe":"CWE-295","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32989","date":"2026-10-27","epss":0.01467,"percentile":0.73562}],"urls":["https://access.redhat.com/errata/RHSA-2025:16115","https://access.redhat.com/errata/RHSA-2025:16116","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:17348","https://access.redhat.com/errata/RHSA-2025:17361","https://access.redhat.com/errata/RHSA-2025:19088","https://access.redhat.com/errata/RHSA-2025:22529","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/security/cve/CVE-2025-32989","https://bugzilla.redhat.com/show_bug.cgi?id=2359621","https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html","http://www.openwall.com/lists/oss-security/2025/07/11/3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-32989","description":"A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension (OID 1.3.6.1.4.1.11129.2.4.2) that contains sensitive data. This issue leads to the exposure of confidential information when GnuTLS verifies certificates from certain websites when the certificate (SCT) is not checked correctly."}]},{"artifact":{"id":"153853205c22517d","cpes":["cpe:2.3:a:requirejs:requirejs:2.3.6:*:*:*:*:*:*:*","cpe:2.3:a:jrburke:requirejs:2.3.6:*:*:*:*:*:*:*"],"name":"requirejs","purl":"pkg:npm/requirejs@2.3.6","type":"npm","version":"2.3.6","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/share/jupyterhub/static/components/requirejs/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/share/jupyterhub/static/components/requirejs/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.3.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-x3m3-4wpv-5vgc","versionConstraint":"<=2.3.6 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"requirejs","version":"2.3.6"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-x3m3-4wpv-5vgc","fix":{"state":"fixed","versions":["2.3.7"],"available":[{"date":"2024-07-26","kind":"first-observed","version":"2.3.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":10,"impactScore":6.1,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38999","cwe":"CWE-1321","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38999","date":"2026-10-27","epss":0.00844,"percentile":0.57765}],"risk":0.71529,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-38999","https://gist.github.com/mestrtee/9acae342285bd2998fa09ebcb1e6d30a","https://github.com/requirejs/r.js/issues/1015","https://github.com/requirejs/requirejs/issues/1854","https://github.com/requirejs/requirejs/pull/1856/commits/ebd7a2ff71473542fa132d0d15c10fb4ed1539e1","https://security.snyk.io/vuln/SNYK-JS-REQUIREJS-5416713"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-x3m3-4wpv-5vgc","description":"jrburke requirejs vulnerable to prototype pollution"},"relatedVulnerabilities":[{"id":"CVE-2024-38999","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":10,"impactScore":6.1,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38999","cwe":"CWE-1321","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38999","date":"2026-10-27","epss":0.00844,"percentile":0.57765}],"urls":["https://gist.github.com/mestrtee/9acae342285bd2998fa09ebcb1e6d30a"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-38999","description":"jrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts._.configure. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4330","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4330","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4330","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4330","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-4330","date":"2026-10-27","epss":0.00939,"percentile":0.60719}],"risk":0.70425,"urls":["https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f","https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4330","description":"Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-6129","versionConstraint":"< 3.0.2-0ubuntu1.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-6129","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.14"],"available":[{"date":"2024-02-05","kind":"advisory","version":"3.0.2-0ubuntu1.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-6129","cwe":"CWE-440","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-6129","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6129","date":"2026-10-27","epss":0.02323,"percentile":0.83395}],"risk":0.6969000000000001,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-6129"},"relatedVulnerabilities":[{"id":"CVE-2023-6129","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6129","cwe":"CWE-440","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-6129","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6129","date":"2026-10-27","epss":0.02323,"percentile":0.83395}],"urls":["https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35","https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04","https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015","https://www.openssl.org/news/secadv/20240109.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://security.netapp.com/advisory/ntap-20240216-0009/","https://security.netapp.com/advisory/ntap-20240426-0008/","https://security.netapp.com/advisory/ntap-20240426-0013/","https://security.netapp.com/advisory/ntap-20240503-0011/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6129","description":"Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.14"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-6129","versionConstraint":"< 3.0.2-0ubuntu1.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-6129","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.14"],"available":[{"date":"2024-02-05","kind":"advisory","version":"3.0.2-0ubuntu1.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-6129","cwe":"CWE-440","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-6129","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6129","date":"2026-10-27","epss":0.02323,"percentile":0.83395}],"risk":0.6969000000000001,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-6129"},"relatedVulnerabilities":[{"id":"CVE-2023-6129","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6129","cwe":"CWE-440","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-6129","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6129","date":"2026-10-27","epss":0.02323,"percentile":0.83395}],"urls":["https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35","https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04","https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015","https://www.openssl.org/news/secadv/20240109.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://security.netapp.com/advisory/ntap-20240216-0009/","https://security.netapp.com/advisory/ntap-20240426-0008/","https://security.netapp.com/advisory/ntap-20240426-0013/","https://security.netapp.com/advisory/ntap-20240503-0011/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6129","description":"Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-0567","versionConstraint":"< 3.7.3-4ubuntu1.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-0567","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.4"],"available":[{"date":"2024-01-22","kind":"advisory","version":"3.7.3-4ubuntu1.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-0567","cwe":"CWE-347","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2024-0567","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-0567","date":"2026-10-27","epss":0.01392,"percentile":0.72202}],"risk":0.696,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-0567"},"relatedVulnerabilities":[{"id":"CVE-2024-0567","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0567","cwe":"CWE-347","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2024-0567","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-0567","date":"2026-10-27","epss":0.01392,"percentile":0.72202}],"urls":["https://access.redhat.com/errata/RHSA-2024:0533","https://access.redhat.com/errata/RHSA-2024:1082","https://access.redhat.com/errata/RHSA-2024:1383","https://access.redhat.com/errata/RHSA-2024:2094","https://access.redhat.com/security/cve/CVE-2024-0567","https://bugzilla.redhat.com/show_bug.cgi?id=2258544","https://gitlab.com/gnutls/gnutls/-/issues/1521","https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html","http://www.openwall.com/lists/oss-security/2024/01/19/3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/","https://security.netapp.com/advisory/ntap-20240202-0011/","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0567","description":"A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-6237","versionConstraint":"< 3.0.2-0ubuntu1.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-6237","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.14"],"available":[{"date":"2024-02-05","kind":"advisory","version":"3.0.2-0ubuntu1.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-6237","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2023-6237","date":"2026-10-27","epss":0.02303,"percentile":0.83234}],"risk":0.6909,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-6237"},"relatedVulnerabilities":[{"id":"CVE-2023-6237","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6237","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2023-6237","date":"2026-10-27","epss":0.02303,"percentile":0.83234}],"urls":["https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d","https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a","https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294","https://www.openssl.org/news/secadv/20240115.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://security.netapp.com/advisory/ntap-20240531-0007/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6237","description":"Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.14"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-6237","versionConstraint":"< 3.0.2-0ubuntu1.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-6237","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.14"],"available":[{"date":"2024-02-05","kind":"advisory","version":"3.0.2-0ubuntu1.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-6237","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2023-6237","date":"2026-10-27","epss":0.02303,"percentile":0.83234}],"risk":0.6909,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-6237"},"relatedVulnerabilities":[{"id":"CVE-2023-6237","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6237","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2023-6237","date":"2026-10-27","epss":0.02303,"percentile":0.83234}],"urls":["https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d","https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a","https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294","https://www.openssl.org/news/secadv/20240115.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://security.netapp.com/advisory/ntap-20240531-0007/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6237","description":"Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue."}]},{"artifact":{"id":"1f8e56f352643db0","cpes":["cpe:2.3:a:libtasn1-6:libtasn1-6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1-6:libtasn1_6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1-6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1_6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1-6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1_6:4.18.0-4build1:*:*:*:*:*:*:*"],"name":"libtasn1-6","purl":"pkg:deb/ubuntu/libtasn1-6@4.18.0-4build1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"4.18.0-4build1","language":"","licenses":["sha256:88a94e40a34bb28145805747cad4018e7eb976b5fd0bf2329dedf90088ebc6e4"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtasn1-6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libtasn1-6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.18.0-4ubuntu0.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-13151","versionConstraint":"< 4.18.0-4ubuntu0.2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"libtasn1-6","version":"4.18.0-4build1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-13151","fix":{"state":"fixed","versions":["4.18.0-4ubuntu0.2"],"available":[{"date":"2026-01-12","kind":"advisory","version":"4.18.0-4ubuntu0.2"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-13151","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-13151","date":"2026-10-27","epss":0.0137,"percentile":0.71763}],"risk":0.685,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-13151"},"relatedVulnerabilities":[{"id":"CVE-2025-13151","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13151","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-13151","date":"2026-10-27","epss":0.0137,"percentile":0.71763}],"urls":["https://gitlab.com/gnutls/libtasn1","https://gitlab.com/gnutls/libtasn1/-/merge_requests/121","http://www.openwall.com/lists/oss-security/2026/01/08/5","https://www.kb.cert.org/vuls/id/271649"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-13151","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42009","versionConstraint":"< 3.7.3-4ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-42009","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.9"],"available":[{"date":"2026-05-20","kind":"advisory","version":"3.7.3-4ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-42009","cwe":"CWE-475","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-42009","cwe":"CWE-475","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42009","date":"2026-10-27","epss":0.01335,"percentile":0.71016}],"risk":0.6675,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42009"},"relatedVulnerabilities":[{"id":"CVE-2026-42009","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42009","cwe":"CWE-475","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-42009","cwe":"CWE-475","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42009","date":"2026-10-27","epss":0.01335,"percentile":0.71016}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:29794","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:34372","https://access.redhat.com/errata/RHSA-2026:34764","https://access.redhat.com/errata/RHSA-2026:34788","https://access.redhat.com/errata/RHSA-2026:36004","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56786","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:56911","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-42009","https://bugzilla.redhat.com/show_bug.cgi?id=2467279","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42009.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42009","description":"A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4813","versionConstraint":"< 2.35-0ubuntu3.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-4813","fix":{"state":"fixed","versions":["2.35-0ubuntu3.5"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.35-0ubuntu3.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-27","epss":0.02221,"percentile":0.82588}],"risk":0.6663,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4813"},"relatedVulnerabilities":[{"id":"CVE-2023-4813","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-27","epss":0.02221,"percentile":0.82588}],"urls":["https://access.redhat.com/errata/RHBA-2024:2413","https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4813","https://bugzilla.redhat.com/show_bug.cgi?id=2237798","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://security.netapp.com/advisory/ntap-20231110-0003/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4813","description":"A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4813","versionConstraint":"< 2.35-0ubuntu3.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-4813","fix":{"state":"fixed","versions":["2.35-0ubuntu3.5"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.35-0ubuntu3.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-27","epss":0.02221,"percentile":0.82588}],"risk":0.6663,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4813"},"relatedVulnerabilities":[{"id":"CVE-2023-4813","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-27","epss":0.02221,"percentile":0.82588}],"urls":["https://access.redhat.com/errata/RHBA-2024:2413","https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4813","https://bugzilla.redhat.com/show_bug.cgi?id=2237798","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://security.netapp.com/advisory/ntap-20231110-0003/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4813","description":"A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4813","versionConstraint":"< 2.35-0ubuntu3.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-4813","fix":{"state":"fixed","versions":["2.35-0ubuntu3.5"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.35-0ubuntu3.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-27","epss":0.02221,"percentile":0.82588}],"risk":0.6663,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4813"},"relatedVulnerabilities":[{"id":"CVE-2023-4813","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-27","epss":0.02221,"percentile":0.82588}],"urls":["https://access.redhat.com/errata/RHBA-2024:2413","https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4813","https://bugzilla.redhat.com/show_bug.cgi?id=2237798","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://security.netapp.com/advisory/ntap-20231110-0003/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4813","description":"A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge."}]},{"artifact":{"id":"ad574f16fdd85546","cpes":["cpe:2.3:a:cross-spawn:cross-spawn:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:cross-spawn:cross_spawn:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:cross_spawn:cross-spawn:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:cross_spawn:cross_spawn:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:moxystudio:cross-spawn:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:moxystudio:cross_spawn:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:cross:cross-spawn:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:cross:cross_spawn:7.0.3:*:*:*:*:*:*:*"],"name":"cross-spawn","purl":"pkg:npm/cross-spawn@7.0.3","type":"npm","version":"7.0.3","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/cross-spawn/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/cross-spawn/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.0.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3xgq-45jj-v275","versionConstraint":">=7.0.0,<7.0.5 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"cross-spawn","version":"7.0.3"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-3xgq-45jj-v275","fix":{"state":"fixed","versions":["7.0.5"],"available":[{"date":"2024-11-16","kind":"first-observed","version":"7.0.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21538","cwe":"CWE-1333","type":"Secondary","source":"report@snyk.io"},{"cve":"CVE-2024-21538","cwe":"CWE-1333","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21538","date":"2026-10-27","epss":0.00868,"percentile":0.58542}],"risk":0.65534,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-21538","https://github.com/moxystudio/node-cross-spawn/pull/160","https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff","https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f","https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230","https://github.com/moxystudio/node-cross-spawn/issues/165","https://github.com/moxystudio/node-cross-spawn/commit/d35c865b877d2f9ded7c1ed87521c2fdb689c8dd","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-8366349"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3xgq-45jj-v275","description":"Regular Expression Denial of Service (ReDoS) in cross-spawn"},"relatedVulnerabilities":[{"id":"CVE-2024-21538","cvss":[{"type":"Secondary","source":"report@snyk.io","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"report@snyk.io","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21538","cwe":"CWE-1333","type":"Secondary","source":"report@snyk.io"},{"cve":"CVE-2024-21538","cwe":"CWE-1333","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21538","date":"2026-10-27","epss":0.00868,"percentile":0.58542}],"urls":["https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff","https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f","https://github.com/moxystudio/node-cross-spawn/pull/160","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-8366349","https://security.snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21538","description":"Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization. An attacker can increase the CPU usage and crash the program by crafting a very large and well crafted string."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33599","versionConstraint":"< 2.35-0ubuntu3.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-33599","fix":{"state":"fixed","versions":["2.35-0ubuntu3.8"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.35-0ubuntu3.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-27","epss":0.0131,"percentile":0.7049}],"risk":0.655,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33599"},"relatedVulnerabilities":[{"id":"CVE-2024-33599","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-27","epss":0.0131,"percentile":0.7049}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0011/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33599","description":"nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow.  This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33599","versionConstraint":"< 2.35-0ubuntu3.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-33599","fix":{"state":"fixed","versions":["2.35-0ubuntu3.8"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.35-0ubuntu3.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-27","epss":0.0131,"percentile":0.7049}],"risk":0.655,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33599"},"relatedVulnerabilities":[{"id":"CVE-2024-33599","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-27","epss":0.0131,"percentile":0.7049}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0011/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33599","description":"nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow.  This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33599","versionConstraint":"< 2.35-0ubuntu3.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-33599","fix":{"state":"fixed","versions":["2.35-0ubuntu3.8"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.35-0ubuntu3.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-27","epss":0.0131,"percentile":0.7049}],"risk":0.655,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33599"},"relatedVulnerabilities":[{"id":"CVE-2024-33599","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-27","epss":0.0131,"percentile":0.7049}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0011/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33599","description":"nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow.  This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-12243","versionConstraint":"< 3.7.3-4ubuntu1.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-12243","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.6"],"available":[{"date":"2025-02-20","kind":"advisory","version":"3.7.3-4ubuntu1.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-12243","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-12243","date":"2026-10-27","epss":0.01292,"percentile":0.70112}],"risk":0.6459999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-12243"},"relatedVulnerabilities":[{"id":"CVE-2024-12243","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-12243","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-12243","date":"2026-10-27","epss":0.01292,"percentile":0.70112}],"urls":["https://access.redhat.com/errata/RHSA-2025:17361","https://access.redhat.com/errata/RHSA-2025:4051","https://access.redhat.com/errata/RHSA-2025:7076","https://access.redhat.com/errata/RHSA-2025:8020","https://access.redhat.com/errata/RHSA-2025:8385","https://access.redhat.com/security/cve/CVE-2024-12243","https://bugzilla.redhat.com/show_bug.cgi?id=2344615","https://gitlab.com/gnutls/gnutls/-/issues/1553","https://gitlab.com/gnutls/libtasn1/-/issues/52","https://lists.debian.org/debian-lts-announce/2025/02/msg00027.html","https://security.netapp.com/advisory/ntap-20250523-0002/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-12243","description":"A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition."}]},{"artifact":{"id":"0821d6f01b00c4aa","cpes":["cpe:2.3:a:libsystemd0:libsystemd0:249.11-0ubuntu3.10:*:*:*:*:*:*:*"],"name":"libsystemd0","purl":"pkg:deb/ubuntu/libsystemd0@249.11-0ubuntu3.10?arch=amd64&distro=ubuntu-22.04&upstream=systemd","type":"deb","version":"249.11-0ubuntu3.10","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsystemd0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libsystemd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"fix":{"suggestedVersion":"249.11-0ubuntu3.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4598","versionConstraint":"< 249.11-0ubuntu3.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"systemd","version":"249.11-0ubuntu3.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-4598","fix":{"state":"fixed","versions":["249.11-0ubuntu3.16"],"available":[{"date":"2025-06-09","kind":"advisory","version":"249.11-0ubuntu3.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-4598","cwe":"CWE-364","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4598","date":"2026-10-27","epss":0.01277,"percentile":0.69808}],"risk":0.6385,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4598"},"relatedVulnerabilities":[{"id":"CVE-2025-4598","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4598","cwe":"CWE-364","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4598","date":"2026-10-27","epss":0.01277,"percentile":0.69808}],"urls":["https://access.redhat.com/errata/RHSA-2025:22660","https://access.redhat.com/errata/RHSA-2025:22868","https://access.redhat.com/errata/RHSA-2025:23227","https://access.redhat.com/errata/RHSA-2025:23234","https://access.redhat.com/errata/RHSA-2026:0414","https://access.redhat.com/errata/RHSA-2026:1652","https://access.redhat.com/errata/RHSA-2026:18153","https://access.redhat.com/security/cve/CVE-2025-4598","https://bugzilla.redhat.com/show_bug.cgi?id=2369242","https://www.openwall.com/lists/oss-security/2025/05/29/3","http://seclists.org/fulldisclosure/2025/Jun/9","http://www.openwall.com/lists/oss-security/2025/06/05/1","http://www.openwall.com/lists/oss-security/2025/06/05/3","http://www.openwall.com/lists/oss-security/2025/08/18/3","https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598","https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/","https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html","https://www.openwall.com/lists/oss-security/2025/08/18/3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4598","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality."}]},{"artifact":{"id":"660ac8ff33e1fbb6","cpes":["cpe:2.3:a:libudev1:libudev1:249.11-0ubuntu3.10:*:*:*:*:*:*:*"],"name":"libudev1","purl":"pkg:deb/ubuntu/libudev1@249.11-0ubuntu3.10?arch=amd64&distro=ubuntu-22.04&upstream=systemd","type":"deb","version":"249.11-0ubuntu3.10","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libudev1/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libudev1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libudev1:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libudev1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"fix":{"suggestedVersion":"249.11-0ubuntu3.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4598","versionConstraint":"< 249.11-0ubuntu3.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"systemd","version":"249.11-0ubuntu3.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-4598","fix":{"state":"fixed","versions":["249.11-0ubuntu3.16"],"available":[{"date":"2025-06-09","kind":"advisory","version":"249.11-0ubuntu3.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-4598","cwe":"CWE-364","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4598","date":"2026-10-27","epss":0.01277,"percentile":0.69808}],"risk":0.6385,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4598"},"relatedVulnerabilities":[{"id":"CVE-2025-4598","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4598","cwe":"CWE-364","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4598","date":"2026-10-27","epss":0.01277,"percentile":0.69808}],"urls":["https://access.redhat.com/errata/RHSA-2025:22660","https://access.redhat.com/errata/RHSA-2025:22868","https://access.redhat.com/errata/RHSA-2025:23227","https://access.redhat.com/errata/RHSA-2025:23234","https://access.redhat.com/errata/RHSA-2026:0414","https://access.redhat.com/errata/RHSA-2026:1652","https://access.redhat.com/errata/RHSA-2026:18153","https://access.redhat.com/security/cve/CVE-2025-4598","https://bugzilla.redhat.com/show_bug.cgi?id=2369242","https://www.openwall.com/lists/oss-security/2025/05/29/3","http://seclists.org/fulldisclosure/2025/Jun/9","http://www.openwall.com/lists/oss-security/2025/06/05/1","http://www.openwall.com/lists/oss-security/2025/06/05/3","http://www.openwall.com/lists/oss-security/2025/08/18/3","https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598","https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/","https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html","https://www.openwall.com/lists/oss-security/2025/08/18/3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4598","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5981","versionConstraint":"< 3.7.3-4ubuntu1.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-5981","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.3"],"available":[{"date":"2023-11-21","kind":"advisory","version":"3.7.3-4ubuntu1.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-5981","cwe":"CWE-208","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5981","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5981","date":"2026-10-27","epss":0.01267,"percentile":0.69618}],"risk":0.6335000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5981"},"relatedVulnerabilities":[{"id":"CVE-2023-5981","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5981","cwe":"CWE-208","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5981","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5981","date":"2026-10-27","epss":0.01267,"percentile":0.69618}],"urls":["https://access.redhat.com/errata/RHSA-2024:0155","https://access.redhat.com/errata/RHSA-2024:0319","https://access.redhat.com/errata/RHSA-2024:0399","https://access.redhat.com/errata/RHSA-2024:0451","https://access.redhat.com/errata/RHSA-2024:0533","https://access.redhat.com/errata/RHSA-2024:1383","https://access.redhat.com/errata/RHSA-2024:2094","https://access.redhat.com/security/cve/CVE-2023-5981","https://bugzilla.redhat.com/show_bug.cgi?id=2248445","https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23","http://www.openwall.com/lists/oss-security/2024/01/19/3","https://lists.debian.org/debian-lts-announce/2023/11/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5981","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-33846","versionConstraint":"< 3.7.3-4ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-33846","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.9"],"available":[{"date":"2026-05-20","kind":"advisory","version":"3.7.3-4ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-33846","cwe":"CWE-130","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33846","cwe":"CWE-130","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33846","date":"2026-10-27","epss":0.01263,"percentile":0.69543}],"risk":0.6315000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-33846"},"relatedVulnerabilities":[{"id":"CVE-2026-33846","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33846","cwe":"CWE-130","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33846","cwe":"CWE-130","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33846","date":"2026-10-27","epss":0.01263,"percentile":0.69543}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:34372","https://access.redhat.com/errata/RHSA-2026:36004","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56786","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:56911","https://access.redhat.com/errata/RHSA-2026:57402","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-33846","https://bugzilla.redhat.com/show_bug.cgi?id=2450625","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33846.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33846","description":"A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.30"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84782","versionConstraint":"< 3.0.2-0ubuntu1.30 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-84782","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.30"],"available":[{"date":"2026-09-29","kind":"advisory","version":"3.0.2-0ubuntu1.30"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-27","epss":0.00831,"percentile":0.57388}],"risk":0.62325,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84782"},"relatedVulnerabilities":[{"id":"CVE-2026-84782","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-27","epss":0.00831,"percentile":0.57388}],"urls":["https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943","https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628","https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58","https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84782","description":"Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.30"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-84782","versionConstraint":"< 3.0.2-0ubuntu1.30 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-84782","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.30"],"available":[{"date":"2026-09-29","kind":"advisory","version":"3.0.2-0ubuntu1.30"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-27","epss":0.00831,"percentile":0.57388}],"risk":0.62325,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84782"},"relatedVulnerabilities":[{"id":"CVE-2026-84782","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-27","epss":0.00831,"percentile":0.57388}],"urls":["https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943","https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628","https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58","https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84782","description":"Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."}]},{"artifact":{"id":"c3b53ca70a359f02","cpes":["cpe:2.3:a:cryptography.io:cryptography:41.0.4:*:*:*:*:python:*:*","cpe:2.3:a:cryptography.io:cryptography:41.0.4:*:*:*:*:*:*:*"],"name":"cryptography","purl":"pkg:pypi/cryptography@41.0.4","type":"python","version":"41.0.4","language":"python","licenses":["Apache-2.0 OR BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"42.0.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6vqw-3v5j-54x4","versionConstraint":">=38.0.0,<42.0.4 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"cryptography","version":"41.0.4"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-6vqw-3v5j-54x4","fix":{"state":"fixed","versions":["42.0.4"],"available":[{"date":"2024-02-22","kind":"first-observed","version":"42.0.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26130","cwe":"CWE-476","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-26130","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-26130","date":"2026-10-27","epss":0.00831,"percentile":0.57379}],"risk":0.62325,"urls":["https://github.com/pyca/cryptography/security/advisories/GHSA-6vqw-3v5j-54x4","https://github.com/pyca/cryptography/pull/10423","https://github.com/pyca/cryptography/commit/97d231672763cdb5959a3b191e692a362f1b9e55","https://nvd.nist.gov/vuln/detail/CVE-2024-26130","https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2024-225.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6vqw-3v5j-54x4","description":"cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override"},"relatedVulnerabilities":[{"id":"CVE-2024-26130","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26130","cwe":"CWE-476","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-26130","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-26130","date":"2026-10-27","epss":0.00831,"percentile":0.57379}],"urls":["https://github.com/pyca/cryptography/commit/97d231672763cdb5959a3b191e692a362f1b9e55","https://github.com/pyca/cryptography/pull/10423","https://github.com/pyca/cryptography/security/advisories/GHSA-6vqw-3v5j-54x4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26130","description":"cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did not match the provided private key and an `encryption_algorithm` with `hmac_hash` set (via `PrivateFormat.PKCS12.encryption_builder().hmac_hash(...)`, then a NULL pointer dereference would occur, crashing the Python process. This has been resolved in version 42.0.4, the first version in which a `ValueError` is properly raised."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-50602","versionConstraint":"< 3.9.21||>= 3.10, < 3.10.16||>= 3.11, < 3.11.11||>= 3.12, < 3.12.8||>= 3.13, < 3.13.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-50602","versionConstraint":"< 3.9.21||>= 3.10, < 3.10.16||>= 3.11, < 3.11.11||>= 3.12, < 3.12.8||>= 3.13, < 3.13.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-50602","fix":{"state":"fixed","versions":["3.9.21","3.10.16","3.11.11","3.12.8","3.13.1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.8"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.1"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.21"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.16"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.8"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-50602","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-50602","date":"2026-10-27","epss":0.01117,"percentile":0.65917}],"risk":0.608765,"urls":["https://github.com/libexpat/libexpat/pull/915","https://lists.debian.org/debian-lts-announce/2025/04/msg00040.html","https://security.netapp.com/advisory/ntap-20250404-0008/","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://cert-portal.siemens.com/productcert/html/ssa-355557.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://docs.python.org/release/3.10.16/whatsnew/changelog.html","https://docs.python.org/release/3.11.11/whatsnew/changelog.html#python-3-11-11","https://docs.python.org/release/3.12.8/whatsnew/changelog.html#python-3-12-8","https://docs.python.org/release/3.13.1/whatsnew/changelog.html#python-3-13-1","https://docs.python.org/release/3.9.21/whatsnew/changelog.html","https://github.com/python/cpython/issues/126623"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-50602","description":"An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser."},"relatedVulnerabilities":[]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33600","versionConstraint":"< 2.35-0ubuntu3.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-33600","fix":{"state":"fixed","versions":["2.35-0ubuntu3.8"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.35-0ubuntu3.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-27","epss":0.01216,"percentile":0.68436}],"risk":0.608,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33600"},"relatedVulnerabilities":[{"id":"CVE-2024-33600","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-27","epss":0.01216,"percentile":0.68436}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0013/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33600","description":"nscd: Null pointer crashes after notfound response\n\nIf the Name Service Cache Daemon's (nscd) cache fails to add a not-found\nnetgroup response to the cache, the client request can result in a null\npointer dereference.  This flaw was introduced in glibc 2.15 when the\ncache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33600","versionConstraint":"< 2.35-0ubuntu3.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-33600","fix":{"state":"fixed","versions":["2.35-0ubuntu3.8"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.35-0ubuntu3.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-27","epss":0.01216,"percentile":0.68436}],"risk":0.608,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33600"},"relatedVulnerabilities":[{"id":"CVE-2024-33600","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-27","epss":0.01216,"percentile":0.68436}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0013/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33600","description":"nscd: Null pointer crashes after notfound response\n\nIf the Name Service Cache Daemon's (nscd) cache fails to add a not-found\nnetgroup response to the cache, the client request can result in a null\npointer dereference.  This flaw was introduced in glibc 2.15 when the\ncache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33600","versionConstraint":"< 2.35-0ubuntu3.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-33600","fix":{"state":"fixed","versions":["2.35-0ubuntu3.8"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.35-0ubuntu3.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-27","epss":0.01216,"percentile":0.68436}],"risk":0.608,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33600"},"relatedVulnerabilities":[{"id":"CVE-2024-33600","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-27","epss":0.01216,"percentile":0.68436}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0013/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33600","description":"nscd: Null pointer crashes after notfound response\n\nIf the Name Service Cache Daemon's (nscd) cache fails to add a not-found\nnetgroup response to the cache, the client request can result in a null\npointer dereference.  This flaw was introduced in glibc 2.15 when the\ncache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.9"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-0397","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.14||>= 3.11.0, < 3.11.9||>= 3.12.0, < 3.12.3||>= 3.13.0a1, < 3.13.0a5||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.9"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-0397","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.14||>= 3.11.0, < 3.11.9||>= 3.12.0, < 3.12.3||>= 3.13.0a1, < 3.13.0a5||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-0397","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.14","3.11.9","3.12.3","3.13.0a5"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.9"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.3"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0a5"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.14"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.9"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.3"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0a5"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0397","cwe":"CWE-362","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0397","date":"2026-10-27","epss":0.0081,"percentile":0.56731}],"risk":0.60345,"urls":["http://www.openwall.com/lists/oss-security/2024/06/17/2","https://github.com/python/cpython/commit/01c37f1d0714f5822d34063ca7180b595abf589d","https://github.com/python/cpython/commit/29c97287d205bf2f410f4895ebce3f43b5160524","https://github.com/python/cpython/commit/37324b421b72b7bc9934e27aba85d48d4773002e","https://github.com/python/cpython/commit/542f3272f56f31ed04e74c40635a913fbc12d286","https://github.com/python/cpython/commit/b228655c227b2ca298a8ffac44d14ce3d22f6faa","https://github.com/python/cpython/commit/bce693111bff906ccf9281c22371331aaff766ab","https://github.com/python/cpython/issues/114572","https://github.com/python/cpython/pull/114573","https://mail.python.org/archives/list/security-announce@python.org/thread/BMAK5BCGKYWNJOACVUSLUF6SFGBIM4VP/","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20250411-0006/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0397","description":"A defect was discovered in the Python “ssl” module where there is a memory\nrace condition with the ssl.SSLContext methods “cert_store_stats()” and\n“get_ca_certs()”. The race condition can be triggered if the methods are\ncalled at the same time as certificates are loaded into the SSLContext,\nsuch as during the TLS handshake with a certificate directory configured.\nThis issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5."},"relatedVulnerabilities":[]},{"artifact":{"id":"b45b4832d770f70d","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter_server:2.8.0:*:*:*:*:*:*:*"],"name":"jupyter-server","purl":"pkg:pypi/jupyter-server@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.14.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hrw6-wg82-cm62","versionConstraint":"<=2.14.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyter-server","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-hrw6-wg82-cm62","fix":{"state":"fixed","versions":["2.14.1"],"available":[{"date":"2024-06-07","kind":"first-observed","version":"2.14.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-35178","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-35178","date":"2026-10-27","epss":0.00804,"percentile":0.56524}],"risk":0.6030000000000001,"urls":["https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-hrw6-wg82-cm62","https://nvd.nist.gov/vuln/detail/CVE-2024-35178","https://github.com/jupyter-server/jupyter_server/commit/79fbf801c5908f4d1d9bc90004b74cfaaeeed2df","https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server/PYSEC-2024-165.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hrw6-wg82-cm62","description":"Jupyter server on Windows discloses Windows user password hash"},"relatedVulnerabilities":[{"id":"CVE-2024-35178","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-35178","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-35178","date":"2026-10-27","epss":0.00804,"percentile":0.56524}],"urls":["https://github.com/jupyter-server/jupyter_server/commit/79fbf801c5908f4d1d9bc90004b74cfaaeeed2df","https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-hrw6-wg82-cm62"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-35178","description":"The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on Windows has a vulnerability that lets unauthenticated attackers leak the NTLMv2 password hash of the Windows user running the Jupyter server. An attacker can crack this password to gain access to the Windows machine hosting the Jupyter server, or access other network-accessible machines or 3rd party services using that credential. Or an attacker perform an NTLM relay attack without cracking the credential to gain access to other network-accessible machines. This vulnerability is fixed in 2.14.1."}]},{"artifact":{"id":"c08fe2fe58d4c369","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyterlab:4.0.7:*:*:*:*:*:*:*"],"name":"jupyterlab","purl":"pkg:pypi/jupyterlab@4.0.7","type":"python","version":"4.0.7","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.5.10"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-pppj-hq3g-57pj","versionConstraint":">=3.3.0,<=4.5.9 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyterlab","version":"4.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-pppj-hq3g-57pj","fix":{"state":"fixed","versions":["4.5.10"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"4.5.10"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:L","metrics":{"baseScore":8.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-73417","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-73417","cwe":"CWE-116","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-73417","date":"2026-10-27","epss":0.00748,"percentile":0.5467}],"risk":0.60214,"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-pppj-hq3g-57pj","https://github.com/jupyterlab/jupyterlab/pull/19184","https://github.com/jupyterlab/jupyterlab/pull/19185","https://github.com/jupyterlab/jupyterlab/pull/19186","https://github.com/jupyterlab/jupyterlab/commit/be9303f5bcd5308eaeae953c5a3c903046682c2c","https://github.com/jupyterlab/jupyterlab/commit/f1beab4a2027af4719d6edc07d52d6cf5a39a432","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.10","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.2"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-pppj-hq3g-57pj","description":"JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)"},"relatedVulnerabilities":[{"id":"CVE-2026-73417","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-73417","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-73417","cwe":"CWE-116","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-73417","date":"2026-10-27","epss":0.00748,"percentile":0.5467}],"urls":["https://github.com/jupyterlab/jupyterlab/commit/9365f020baec5221deaf11535ed554c06637c999","https://github.com/jupyterlab/jupyterlab/commit/be9303f5bcd5308eaeae953c5a3c903046682c2c","https://github.com/jupyterlab/jupyterlab/commit/f1beab4a2027af4719d6edc07d52d6cf5a39a432","https://github.com/jupyterlab/jupyterlab/pull/19184","https://github.com/jupyterlab/jupyterlab/pull/19185","https://github.com/jupyterlab/jupyterlab/pull/19186","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.10","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.2","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.7.0a1","https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-pppj-hq3g-57pj"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-73417","description":"jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows notebook settings to be shared and applied through an overrides.json file using the Import button in the Settings Editor. In packages/notebook-extension/schema/tracker.json and packages/notebook-extension/src/index.ts, the sideBySideLeftMarginOverride and sideBySideRightMarginOverride settings are not properly validated before being inserted into style content, allowing a crafted settings file to contain instructions that execute as code instead of only changing display preferences. A user can import the malicious file, or an attacker with access to a shared settings location can plant an overrides.json that is applied automatically. The embedded code runs with the affected user's access and can read or modify notebooks and files and run code through the notebook server, including on a connected kernel. This issue is fixed in versions 4.5.10 and 4.6.2."}]},{"artifact":{"id":"e68cc45a0b7ed402","cpes":["cpe:2.3:a:mike_bayer_project:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer_project:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayerproject:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayerproject:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_project:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_project:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer_project:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mikeproject:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mikeproject:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python-mako:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python-mako:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python_mako:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python_mako:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayerproject:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_project:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mako:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mako:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mikeproject:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python-mako:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python_mako:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mako:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike:mako:1.2.4:*:*:*:*:*:*:*"],"name":"mako","purl":"pkg:pypi/mako@1.2.4","type":"python","version":"1.2.4","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.3.12"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2h4p-vjrc-8xpq","versionConstraint":"<=1.3.11 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mako","version":"1.2.4"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-2h4p-vjrc-8xpq","fix":{"state":"fixed","versions":["1.3.12"],"available":[{"date":"2026-05-07","kind":"first-observed","version":"1.3.12"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-44307","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-44307","date":"2026-10-27","epss":0.00742,"percentile":0.5445}],"risk":0.60102,"urls":["https://github.com/sqlalchemy/mako/security/advisories/GHSA-2h4p-vjrc-8xpq","https://github.com/sqlalchemy/mako/issues/435","https://github.com/sqlalchemy/mako/commit/72e10c573ca0fbcbddd4455abca8ce92a61780d7","https://github.com/sqlalchemy/mako/releases/tag/rel_1_3_12","https://nvd.nist.gov/vuln/detail/CVE-2026-44307"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2h4p-vjrc-8xpq","description":"Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup"},"relatedVulnerabilities":[{"id":"CVE-2026-44307","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-44307","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-44307","date":"2026-10-27","epss":0.00742,"percentile":0.5445}],"urls":["https://github.com/sqlalchemy/mako/commit/72e10c573ca0fbcbddd4455abca8ce92a61780d7","https://github.com/sqlalchemy/mako/issues/435","https://github.com/sqlalchemy/mako/releases/tag/rel_1_3_12","https://github.com/sqlalchemy/mako/security/advisories/GHSA-2h4p-vjrc-8xpq"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-44307","description":"Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \\..\\..\\ secret.txt) bypasses the directory traversal check in Template.__init__ and the posixpath-based normalization in TemplateLookup.get_template(), allowing reads of files outside the configured template directory. This vulnerability is fixed in 1.3.12."}]},{"artifact":{"id":"c212ad19b69d6fc8","cpes":["cpe:2.3:a:follow-redirects:follow_redirects:1.15.2:*:*:*:*:node.js:*:*"],"name":"follow-redirects","purl":"pkg:npm/follow-redirects@1.15.2","type":"npm","version":"1.15.2","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/configurable-http-proxy/node_modules/follow-redirects/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/configurable-http-proxy/node_modules/follow-redirects/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.15.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cxjh-pqwp-8mfp","versionConstraint":"<=1.15.5 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"follow-redirects","version":"1.15.2"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-cxjh-pqwp-8mfp","fix":{"state":"fixed","versions":["1.15.6"],"available":[{"date":"2024-03-15","kind":"first-observed","version":"1.15.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28849","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-28849","date":"2026-10-27","epss":0.01044,"percentile":0.6397}],"risk":0.6003,"urls":["https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-cxjh-pqwp-8mfp","https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b","https://fetch.spec.whatwg.org/#authentication-entries","https://nvd.nist.gov/vuln/detail/CVE-2024-28849","https://github.com/psf/requests/issues/1885","https://hackerone.com/reports/2390009","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOIF4EPQUCKDBEVTGRQDZ3CGTYQHPO7Z"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cxjh-pqwp-8mfp","description":"follow-redirects' Proxy-Authorization header kept across hosts"},"relatedVulnerabilities":[{"id":"CVE-2024-28849","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28849","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-28849","date":"2026-10-27","epss":0.01044,"percentile":0.6397}],"urls":["https://fetch.spec.whatwg.org/#authentication-entries","https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b","https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-cxjh-pqwp-8mfp","https://github.com/psf/requests/issues/1885","https://hackerone.com/reports/2390009","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOIF4EPQUCKDBEVTGRQDZ3CGTYQHPO7Z/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28849","description":"follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. In affected versions follow-redirects only clears authorization header during cross-domain redirect, but keep the proxy-authentication header which contains credentials too. This vulnerability may lead to credentials leak, but has been addressed in version 1.15.6. Users are advised to upgrade. There are no known workarounds for this vulnerability."}]},{"artifact":{"id":"933d3f7a83a3748d","cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:generic/openssl@3.1.3","type":"binary","version":"3.1.3","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/openssl","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/openssl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-4603","versionConstraint":">= 3.0.0, < 3.0.14||>= 3.1.0, < 3.1.6||>= 3.2.0, < 3.2.2||>= 3.3.0, < 3.3.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.1.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-4603","fix":{"state":"fixed","versions":["3.0.14","3.1.6","3.2.2","3.3.1"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"3.0.14"},{"date":"2025-09-04","kind":"first-observed","version":"3.1.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.2.2"},{"date":"2025-09-04","kind":"first-observed","version":"3.3.1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4603","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-4603","cwe":"CWE-834","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-4603","date":"2026-10-27","epss":0.01131,"percentile":0.66257}],"risk":0.582465,"urls":["https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397","https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e","https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d","https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740","https://www.openssl.org/news/secadv/20240516.txt","http://www.openwall.com/lists/oss-security/2024/05/16/2","https://security.netapp.com/advisory/ntap-20240621-0001/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4603","description":"Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6923","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.5||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6923","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.5||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-6923","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.5","3.13.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.5"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0rc2"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.5"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.5,"impactScore":3.4,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6923","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-6923","date":"2026-10-27","epss":0.011,"percentile":0.65495}],"risk":0.5775,"urls":["https://github.com/python/cpython/commit/06f28dc236708f72871c64d4bc4b4ea144c50147","https://github.com/python/cpython/commit/097633981879b3c9de9a1dd120d3aa585ecc2384","https://github.com/python/cpython/commit/4766d1200fdf8b6728137aa2927a297e224d5fa7","https://github.com/python/cpython/commit/4aaa4259b5a6e664b7316a4d60bdec7ee0f124d0","https://github.com/python/cpython/commit/b158a76ce094897c870fb6b3de62887b7ccc33f1","https://github.com/python/cpython/commit/f7be505d137a22528cb0fc004422c0081d5d90e6","https://github.com/python/cpython/commit/f7c0f09e69e950cf3c5ada9dbde93898eb975533","https://github.com/python/cpython/issues/121650","https://github.com/python/cpython/pull/122233","https://mail.python.org/archives/list/security-announce@python.org/thread/QH3BUOE2DYQBWP7NAQ7UNHPPOELKISRW/","http://www.openwall.com/lists/oss-security/2024/08/01/3","http://www.openwall.com/lists/oss-security/2024/08/02/2","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/01/msg00005.html","https://security.netapp.com/advisory/ntap-20240926-0003/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6923","description":"There is a MEDIUM severity vulnerability affecting CPython.\n\nThe \nemail module didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized."},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-11940","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-11940","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-11940","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b4"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b4"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-12","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-12","kind":"first-observed","version":"3.14.7"},{"date":"2026-07-30","kind":"first-observed","version":"3.15.0b4"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-10-27","epss":0.0075,"percentile":0.54754}],"risk":0.57375,"urls":["https://github.com/python/cpython/commit/0f852b3f07dd8e71e40326a51c02afbf16a42cc5","https://github.com/python/cpython/commit/27dd970bf6b17ebca7c8ed486a40ab043ed7af8f","https://github.com/python/cpython/commit/672825e2f36a57e173959b0d9d409d4560dab8df","https://github.com/python/cpython/commit/771d12dda5140313db0ac550292987975651bbde","https://github.com/python/cpython/commit/79c06bd5c6afa3c440d50faf7ee1b147c8832b4c","https://github.com/python/cpython/commit/be13e86f6b9788a6f4d0419dffef72cbae5865c9","https://github.com/python/cpython/commit/e5fdbd8d5aa923bd9111b112ea73bd6ec7c47877","https://github.com/python/cpython/issues/151558","https://github.com/python/cpython/pull/151559","https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11940","description":"tarfile.extractall() with the 'data' or 'tar'\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself.  \nThe extraction fallback validated the symlink at it's archived location \nbut recreated it at the hardlink's shallower\npath, letting a relative\n target the filter judged contained escape the destination directory.  \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330."},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-11972","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-11972","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-11972","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b4"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b4"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-12","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-12","kind":"first-observed","version":"3.14.7"},{"date":"2026-07-30","kind":"first-observed","version":"3.15.0b4"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-10-27","epss":0.00715,"percentile":0.53549}],"risk":0.561275,"urls":["https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9","https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365","https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21","https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec","https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192","https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896","https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438","https://github.com/python/cpython/issues/151981","https://github.com/python/cpython/pull/151982","https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11972","description":"When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer."},"relatedVulnerabilities":[]},{"artifact":{"id":"fd33bcffbac145b9","cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:generic/krb5@1.21.2","type":"binary","version":"1.21.2","language":"","licenses":[],"locations":[{"path":"/opt/conda/lib/libkrb5.so.3.3","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libkrb5.so.3.3","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.21.3"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.21.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"package":{"name":"krb5","version":"1.21.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.21.3"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.21.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-27","epss":0.00748,"percentile":0.54698}],"risk":0.5609999999999999,"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."},"relatedVulnerabilities":[]},{"artifact":{"id":"fa287c7bb04e1dbb","cpes":["cpe:2.3:a:python:urllib3:2.0.7:*:*:*:*:*:*:*"],"name":"urllib3","purl":"pkg:pypi/urllib3@2.0.7","type":"python","version":"2.0.7","language":"python","licenses":[],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.6.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gm62-xv2j-4w53","versionConstraint":">=1.24,<2.6.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"urllib3","version":"2.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-gm62-xv2j-4w53","fix":{"state":"fixed","versions":["2.6.0"],"available":[{"date":"2025-12-06","kind":"first-observed","version":"2.6.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66418","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-66418","date":"2026-10-27","epss":0.00682,"percentile":0.52266}],"risk":0.55924,"urls":["https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53","https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8","https://nvd.nist.gov/vuln/detail/CVE-2025-66418"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gm62-xv2j-4w53","description":"urllib3 allows an unbounded number of links in the decompression chain"},"relatedVulnerabilities":[{"id":"CVE-2025-66418","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66418","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-66418","date":"2026-10-27","epss":0.00682,"percentile":0.52266}],"urls":["https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8","https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-66418","description":"urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0."}]},{"artifact":{"id":"fa287c7bb04e1dbb","cpes":["cpe:2.3:a:python:urllib3:2.0.7:*:*:*:*:*:*:*"],"name":"urllib3","purl":"pkg:pypi/urllib3@2.0.7","type":"python","version":"2.0.7","language":"python","licenses":[],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.6.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2xpw-w6gg-jr37","versionConstraint":">=1.0,<2.6.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"urllib3","version":"2.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-2xpw-w6gg-jr37","fix":{"state":"fixed","versions":["2.6.0"],"available":[{"date":"2025-12-06","kind":"first-observed","version":"2.6.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66471","cwe":"CWE-409","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-66471","date":"2026-10-27","epss":0.00682,"percentile":0.52265}],"risk":0.55924,"urls":["https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37","https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7","https://nvd.nist.gov/vuln/detail/CVE-2025-66471","https://github.com/urllib3/urllib3/commit/d0fde3672e4a4093f7587858dccfc298eb66e46c","https://github.com/pypa/advisory-database/tree/main/vulns/urllib3/PYSEC-2026-1994.yaml","https://github.com/urllib3/urllib3","https://pypi.org/project/urllib3"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2xpw-w6gg-jr37","description":"urllib3 streaming API improperly handles highly compressed data"},"relatedVulnerabilities":[{"id":"CVE-2025-66471","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66471","cwe":"CWE-409","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-66471","date":"2026-10-27","epss":0.00682,"percentile":0.52265}],"urls":["https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7","https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-66471","description":"urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data."}]},{"artifact":{"id":"9d60751a9fbaf207","cpes":["cpe:2.3:a:python_tornado_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:tornado:6.3.3:*:*:*:*:*:*:*"],"name":"tornado","purl":"pkg:pypi/tornado@6.3.3","type":"python","version":"6.3.3","language":"python","licenses":["Apache-2.0"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"6.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7cx3-6m66-7c5m","versionConstraint":"<6.5 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"tornado","version":"6.3.3"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-7cx3-6m66-7c5m","fix":{"state":"fixed","versions":["6.5"],"available":[{"date":"2025-05-24","kind":"first-observed","version":"6.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-47287","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-47287","date":"2026-10-27","epss":0.00745,"percentile":0.54588}],"risk":0.5587500000000001,"urls":["https://github.com/tornadoweb/tornado/security/advisories/GHSA-7cx3-6m66-7c5m","https://nvd.nist.gov/vuln/detail/CVE-2025-47287","https://github.com/tornadoweb/tornado/commit/b39b892bf78fe8fea01dd45199aa88307e7162f3","https://lists.debian.org/debian-lts-announce/2025/05/msg00038.html"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7cx3-6m66-7c5m","description":"Tornado vulnerable to excessive logging caused by malformed multipart form data"},"relatedVulnerabilities":[{"id":"CVE-2025-47287","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-47287","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-47287","date":"2026-10-27","epss":0.00745,"percentile":0.54588}],"urls":["https://github.com/tornadoweb/tornado/commit/b39b892bf78fe8fea01dd45199aa88307e7162f3","https://github.com/tornadoweb/tornado/security/advisories/GHSA-7cx3-6m66-7c5m","https://lists.debian.org/debian-lts-announce/2025/05/msg00038.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-47287","description":"Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume of logs, constituting a DoS attack. This DoS is compounded by the fact that the logging subsystem is synchronous. All versions of Tornado prior to 6.5.0 are affected. The vulnerable parser is enabled by default. Upgrade to Tornado version 6.50 to receive a patch. As a workaround, risk can be mitigated by blocking `Content-Type: multipart/form-data` in a proxy."}]},{"artifact":{"id":"1f8e56f352643db0","cpes":["cpe:2.3:a:libtasn1-6:libtasn1-6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1-6:libtasn1_6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1-6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1_6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1-6:4.18.0-4build1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1_6:4.18.0-4build1:*:*:*:*:*:*:*"],"name":"libtasn1-6","purl":"pkg:deb/ubuntu/libtasn1-6@4.18.0-4build1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"4.18.0-4build1","language":"","licenses":["sha256:88a94e40a34bb28145805747cad4018e7eb976b5fd0bf2329dedf90088ebc6e4"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtasn1-6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libtasn1-6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.18.0-4ubuntu0.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-12133","versionConstraint":"< 4.18.0-4ubuntu0.1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"libtasn1-6","version":"4.18.0-4build1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-12133","fix":{"state":"fixed","versions":["4.18.0-4ubuntu0.1"],"available":[{"date":"2025-02-18","kind":"advisory","version":"4.18.0-4ubuntu0.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-12133","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-12133","date":"2026-10-27","epss":0.0111,"percentile":0.65749}],"risk":0.555,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-12133"},"relatedVulnerabilities":[{"id":"CVE-2024-12133","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-12133","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-12133","date":"2026-10-27","epss":0.0111,"percentile":0.65749}],"urls":["https://access.redhat.com/errata/RHSA-2025:17347","https://access.redhat.com/errata/RHSA-2025:4049","https://access.redhat.com/errata/RHSA-2025:7077","https://access.redhat.com/errata/RHSA-2025:8021","https://access.redhat.com/errata/RHSA-2025:8385","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/security/cve/CVE-2024-12133","https://bugzilla.redhat.com/show_bug.cgi?id=2344611","https://gitlab.com/gnutls/libtasn1/-/blob/master/doc/security/CVE-2024-12133.md","https://gitlab.com/gnutls/libtasn1/-/issues/52","http://www.openwall.com/lists/oss-security/2025/02/06/6","https://lists.debian.org/debian-lts-announce/2025/02/msg00025.html","https://security.netapp.com/advisory/ntap-20250523-0003/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-12133","description":"A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack."}]},{"artifact":{"id":"680ad1ef8d2de90f","cpes":["cpe:2.3:a:libcmark-gfm-extensions0.29.0.gfm.3:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm-extensions0.29.0.gfm.3:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm_extensions0.29.0.gfm.3:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm_extensions0.29.0.gfm.3:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*"],"name":"libcmark-gfm-extensions0.29.0.gfm.3","purl":"pkg:deb/ubuntu/libcmark-gfm-extensions0.29.0.gfm.3@0.29.0.gfm.3-3?arch=amd64&distro=ubuntu-22.04&upstream=cmark-gfm","type":"deb","version":"0.29.0.gfm.3-3","language":"","licenses":["Apache","BSD-2-clause","CC-BY-SA-4.0","Expat","Unicode"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcmark-gfm-extensions0.29.0.gfm.3/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/libcmark-gfm-extensions0.29.0.gfm.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcmark-gfm-extensions0.29.0.gfm.3:amd64.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/libcmark-gfm-extensions0.29.0.gfm.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cmark-gfm"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-22486","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"cmark-gfm","version":"0.29.0.gfm.3-3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-22486","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-22486","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22486","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22486","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-22486","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22486","date":"2026-10-27","epss":0.01108,"percentile":0.6569}],"risk":0.5539999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-22486"},"relatedVulnerabilities":[{"id":"CVE-2023-22486","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.5,"impactScore":1.5,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-22486","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22486","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22486","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-22486","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22486","date":"2026-10-27","epss":0.01108,"percentile":0.6569}],"urls":["https://github.com/github/cmark-gfm/security/advisories/GHSA-r572-jvj2-3m8p"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-22486","description":"cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a  polynomial time complexity issue in handle_close_bracket that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7."}]},{"artifact":{"id":"15a5ed723d6f6533","cpes":["cpe:2.3:a:libcmark-gfm0.29.0.gfm.3:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm0.29.0.gfm.3:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm0.29.0.gfm.3:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm0.29.0.gfm.3:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*"],"name":"libcmark-gfm0.29.0.gfm.3","purl":"pkg:deb/ubuntu/libcmark-gfm0.29.0.gfm.3@0.29.0.gfm.3-3?arch=amd64&distro=ubuntu-22.04&upstream=cmark-gfm","type":"deb","version":"0.29.0.gfm.3-3","language":"","licenses":["Apache","BSD-2-clause","CC-BY-SA-4.0","Expat","Unicode"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcmark-gfm0.29.0.gfm.3/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/libcmark-gfm0.29.0.gfm.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcmark-gfm0.29.0.gfm.3:amd64.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/libcmark-gfm0.29.0.gfm.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cmark-gfm"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-22486","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"cmark-gfm","version":"0.29.0.gfm.3-3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-22486","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-22486","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22486","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22486","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-22486","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22486","date":"2026-10-27","epss":0.01108,"percentile":0.6569}],"risk":0.5539999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-22486"},"relatedVulnerabilities":[{"id":"CVE-2023-22486","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.5,"impactScore":1.5,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-22486","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22486","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22486","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-22486","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22486","date":"2026-10-27","epss":0.01108,"percentile":0.6569}],"urls":["https://github.com/github/cmark-gfm/security/advisories/GHSA-r572-jvj2-3m8p"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-22486","description":"cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a  polynomial time complexity issue in handle_close_bracket that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7."}]},{"artifact":{"id":"c08fe2fe58d4c369","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyterlab:4.0.7:*:*:*:*:*:*:*"],"name":"jupyterlab","purl":"pkg:pypi/jupyterlab@4.0.7","type":"python","version":"4.0.7","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.5.10"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gx64-gj6p-pc4c","versionConstraint":"<=4.5.9 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyterlab","version":"4.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-gx64-gj6p-pc4c","fix":{"state":"fixed","versions":["4.5.10"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"4.5.10"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":7.5},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-73415","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-73415","date":"2026-10-27","epss":0.00737,"percentile":0.54291}],"risk":0.55275,"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-gx64-gj6p-pc4c","https://github.com/jupyterlab/jupyterlab/pull/19184","https://github.com/jupyterlab/jupyterlab/pull/19185","https://github.com/jupyterlab/jupyterlab/pull/19186","https://github.com/jupyterlab/jupyterlab/commit/be9303f5bcd5308eaeae953c5a3c903046682c2c","https://github.com/jupyterlab/jupyterlab/commit/f1beab4a2027af4719d6edc07d52d6cf5a39a432","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.10","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.2"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gx64-gj6p-pc4c","description":"JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab"},"relatedVulnerabilities":[{"id":"CVE-2026-73415","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.5},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-73415","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-73415","date":"2026-10-27","epss":0.00737,"percentile":0.54291}],"urls":["https://github.com/jupyterlab/jupyterlab/commit/9365f020baec5221deaf11535ed554c06637c999","https://github.com/jupyterlab/jupyterlab/commit/be9303f5bcd5308eaeae953c5a3c903046682c2c","https://github.com/jupyterlab/jupyterlab/commit/f1beab4a2027af4719d6edc07d52d6cf5a39a432","https://github.com/jupyterlab/jupyterlab/pull/19184","https://github.com/jupyterlab/jupyterlab/pull/19185","https://github.com/jupyterlab/jupyterlab/pull/19186","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.10","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.2","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.7.0a1","https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-gx64-gj6p-pc4c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-73415","description":"jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.10 and 4.6.2, in packages/imageviewer/src/widget.ts, JupyterLab's ImageViewer uses URL.createObjectURL for a specially crafted SVG image and revokes the blob URL too early, allowing the image to retain an executable same-origin context when it is opened through the image viewer and then opened in a new browser tab. The resulting cross-site scripting can be used to execute arbitrary code on the JupyterLab server. This issue is fixed in versions 4.5.10 and 4.6.2."}]},{"artifact":{"id":"c0b145b45a6f9d3f","cpes":["cpe:2.3:a:wget:wget:1.21.2-2ubuntu1:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/ubuntu/wget@1.21.2-2ubuntu1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"1.21.2-2ubuntu1","language":"","licenses":["sha256:c58cb5a2d94f35f0e9b0f1a038d48b73477aa12782ff17328c21d8a86f5f99d5"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-31879","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"wget","version":"1.21.2-2ubuntu1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2021-31879","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-31879","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-31879","date":"2026-10-27","epss":0.01104,"percentile":0.65586}],"risk":0.5519999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-31879"},"relatedVulnerabilities":[{"id":"CVE-2021-31879","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-31879","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-31879","date":"2026-10-27","epss":0.01104,"percentile":0.65586}],"urls":["https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html","https://security.netapp.com/advisory/ntap-20210618-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-31879","description":"GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33601","versionConstraint":"< 2.35-0ubuntu3.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-33601","fix":{"state":"fixed","versions":["2.35-0ubuntu3.8"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.35-0ubuntu3.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-27","epss":0.01075,"percentile":0.64805}],"risk":0.5375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33601"},"relatedVulnerabilities":[{"id":"CVE-2024-33601","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-27","epss":0.01075,"percentile":0.64805}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0014/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33601","description":"nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33601","versionConstraint":"< 2.35-0ubuntu3.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-33601","fix":{"state":"fixed","versions":["2.35-0ubuntu3.8"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.35-0ubuntu3.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-27","epss":0.01075,"percentile":0.64805}],"risk":0.5375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33601"},"relatedVulnerabilities":[{"id":"CVE-2024-33601","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-27","epss":0.01075,"percentile":0.64805}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0014/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33601","description":"nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33601","versionConstraint":"< 2.35-0ubuntu3.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-33601","fix":{"state":"fixed","versions":["2.35-0ubuntu3.8"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.35-0ubuntu3.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-27","epss":0.01075,"percentile":0.64805}],"risk":0.5375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33601"},"relatedVulnerabilities":[{"id":"CVE-2024-33601","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-27","epss":0.01075,"percentile":0.64805}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0014/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33601","description":"nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"9bcce1d4bc1d29ea","cpes":["cpe:2.3:a:pyopenssl_developers_project:python-pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:pyopenssl_developers_project:python_pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:pyopenssl_developersproject:python-pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:pyopenssl_developersproject:python_pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:cryptography_dev_project:python-pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:cryptography_dev_project:python_pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:cryptography_devproject:python-pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:cryptography_devproject:python_pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:pyopenssl_developers_project:pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:pyopenssl_developers:python-pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:pyopenssl_developers:python_pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:pyopenssl_developersproject:pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:cryptography_dev_project:pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:cryptography-dev:python-pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:cryptography-dev:python_pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:cryptography_dev:python-pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:cryptography_dev:python_pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:cryptography_devproject:pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyopenssl:python-pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyopenssl:python_pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyopenssl:python-pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyopenssl:python_pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:pyopenssl_developers:pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:cryptography-dev:pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:cryptography_dev:pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:pyopenssl:python-pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:pyopenssl:python_pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyopenssl:pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyopenssl:pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:pyopenssl:pyopenssl:23.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python:pyopenssl:23.2.0:*:*:*:*:*:*:*"],"name":"pyopenssl","purl":"pkg:pypi/pyopenssl@23.2.0","type":"python","version":"23.2.0","language":"python","licenses":["Apache License, Version 2.0"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/pyOpenSSL-23.2.0.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/pyOpenSSL-23.2.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/pyOpenSSL-23.2.0.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/pyOpenSSL-23.2.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/pyOpenSSL-23.2.0.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/pyOpenSSL-23.2.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/pyOpenSSL-23.2.0.dist-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/pyOpenSSL-23.2.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"26.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5pwr-322w-8jr4","versionConstraint":">=22.0.0,<26.0.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"pyopenssl","version":"23.2.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-5pwr-322w-8jr4","fix":{"state":"fixed","versions":["26.0.0"],"available":[{"date":"2026-03-16","kind":"first-observed","version":"26.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27459","cwe":"CWE-120","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-27459","cwe":"CWE-120","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-27459","date":"2026-10-27","epss":0.00731,"percentile":0.54101}],"risk":0.5372849999999999,"urls":["https://github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4","https://github.com/pyca/pyopenssl/commit/57f09bb4bb051d3bc2a1abd36e9525313d5cd408","https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst","https://nvd.nist.gov/vuln/detail/CVE-2026-27459"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5pwr-322w-8jr4","description":"pyOpenSSL DTLS cookie callback buffer overflow"},"relatedVulnerabilities":[{"id":"CVE-2026-27459","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27459","cwe":"CWE-120","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-27459","cwe":"CWE-120","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-27459","date":"2026-10-27","epss":0.00731,"percentile":0.54101}],"urls":["https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst","https://github.com/pyca/pyopenssl/commit/57f09bb4bb051d3bc2a1abd36e9525313d5cd408","https://github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4","https://access.redhat.com/errata/RHSA-2026:10754","https://access.redhat.com/errata/RHSA-2026:11856","https://access.redhat.com/errata/RHSA-2026:11916","https://access.redhat.com/errata/RHSA-2026:11996","https://access.redhat.com/errata/RHSA-2026:13508","https://access.redhat.com/errata/RHSA-2026:13512","https://access.redhat.com/errata/RHSA-2026:13545","https://access.redhat.com/errata/RHSA-2026:13553","https://access.redhat.com/errata/RHSA-2026:14835","https://access.redhat.com/errata/RHSA-2026:14873","https://access.redhat.com/errata/RHSA-2026:14874","https://access.redhat.com/errata/RHSA-2026:19375","https://access.redhat.com/errata/RHSA-2026:21017","https://access.redhat.com/errata/RHSA-2026:22465","https://access.redhat.com/errata/RHSA-2026:24853","https://access.redhat.com/errata/RHSA-2026:48085","https://access.redhat.com/errata/RHSA-2026:48758","https://access.redhat.com/errata/RHSA-2026:59153","https://access.redhat.com/errata/RHSA-2026:7224","https://access.redhat.com/errata/RHSA-2026:8437","https://access.redhat.com/security/cve/CVE-2026-27459","https://bugzilla.redhat.com/show_bug.cgi?id=2448503","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27459.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-27459","description":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected."}]},{"artifact":{"id":"c3b53ca70a359f02","cpes":["cpe:2.3:a:cryptography.io:cryptography:41.0.4:*:*:*:*:python:*:*","cpe:2.3:a:cryptography.io:cryptography:41.0.4:*:*:*:*:*:*:*"],"name":"cryptography","purl":"pkg:pypi/cryptography@41.0.4","type":"python","version":"41.0.4","language":"python","licenses":["Apache-2.0 OR BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"41.0.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-jfhm-5ghh-2f97","versionConstraint":">=3.1,<41.0.6 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"cryptography","version":"41.0.4"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-jfhm-5ghh-2f97","fix":{"state":"fixed","versions":["41.0.6"],"available":[{"date":"2023-11-29","kind":"first-observed","version":"41.0.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-49083","cwe":"CWE-476","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-49083","date":"2026-10-27","epss":0.00985,"percentile":0.62171}],"risk":0.536825,"urls":["https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97","https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a","https://nvd.nist.gov/vuln/detail/CVE-2023-49083","https://github.com/pyca/cryptography/pull/9926","http://www.openwall.com/lists/oss-security/2023/11/29/2","https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2023-254.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMNTYMUGFJSDBYBU22FUYBHFRZODRKXV","https://lists.debian.org/debian-lts-announce/2024/10/msg00012.html"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-jfhm-5ghh-2f97","description":"cryptography vulnerable to NULL-dereference when loading PKCS7 certificates"},"relatedVulnerabilities":[{"id":"CVE-2023-49083","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-49083","cwe":"CWE-476","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-49083","date":"2026-10-27","epss":0.00985,"percentile":0.62171}],"urls":["https://github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a","https://github.com/pyca/cryptography/pull/9926","https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QMNTYMUGFJSDBYBU22FUYBHFRZODRKXV/","https://lists.debian.org/debian-lts-announce/2024/10/msg00012.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-49083","description":"cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6."}]},{"artifact":{"id":"680ad1ef8d2de90f","cpes":["cpe:2.3:a:libcmark-gfm-extensions0.29.0.gfm.3:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm-extensions0.29.0.gfm.3:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm_extensions0.29.0.gfm.3:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm_extensions0.29.0.gfm.3:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*"],"name":"libcmark-gfm-extensions0.29.0.gfm.3","purl":"pkg:deb/ubuntu/libcmark-gfm-extensions0.29.0.gfm.3@0.29.0.gfm.3-3?arch=amd64&distro=ubuntu-22.04&upstream=cmark-gfm","type":"deb","version":"0.29.0.gfm.3-3","language":"","licenses":["Apache","BSD-2-clause","CC-BY-SA-4.0","Expat","Unicode"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcmark-gfm-extensions0.29.0.gfm.3/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/libcmark-gfm-extensions0.29.0.gfm.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcmark-gfm-extensions0.29.0.gfm.3:amd64.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/libcmark-gfm-extensions0.29.0.gfm.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cmark-gfm"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-22483","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"cmark-gfm","version":"0.29.0.gfm.3-3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-22483","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-22483","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22483","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22483","date":"2026-10-27","epss":0.01073,"percentile":0.64755}],"risk":0.5365,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-22483"},"relatedVulnerabilities":[{"id":"CVE-2023-22483","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.5,"impactScore":1.5,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-22483","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22483","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22483","date":"2026-10-27","epss":0.01073,"percentile":0.64755}],"urls":["https://github.com/github/cmark-gfm/security/advisories/GHSA-29g3-96g3-jg6c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-22483","description":"cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to several polynomial time complexity issues in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. Various commands, when piped to cmark-gfm with large values, cause the running time to increase quadratically. These vulnerabilities have been patched in version 0.29.0.gfm.7."}]},{"artifact":{"id":"15a5ed723d6f6533","cpes":["cpe:2.3:a:libcmark-gfm0.29.0.gfm.3:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm0.29.0.gfm.3:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm0.29.0.gfm.3:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm0.29.0.gfm.3:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*"],"name":"libcmark-gfm0.29.0.gfm.3","purl":"pkg:deb/ubuntu/libcmark-gfm0.29.0.gfm.3@0.29.0.gfm.3-3?arch=amd64&distro=ubuntu-22.04&upstream=cmark-gfm","type":"deb","version":"0.29.0.gfm.3-3","language":"","licenses":["Apache","BSD-2-clause","CC-BY-SA-4.0","Expat","Unicode"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcmark-gfm0.29.0.gfm.3/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/libcmark-gfm0.29.0.gfm.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcmark-gfm0.29.0.gfm.3:amd64.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/libcmark-gfm0.29.0.gfm.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cmark-gfm"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-22483","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"cmark-gfm","version":"0.29.0.gfm.3-3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-22483","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-22483","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22483","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22483","date":"2026-10-27","epss":0.01073,"percentile":0.64755}],"risk":0.5365,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-22483"},"relatedVulnerabilities":[{"id":"CVE-2023-22483","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.5,"impactScore":1.5,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-22483","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22483","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22483","date":"2026-10-27","epss":0.01073,"percentile":0.64755}],"urls":["https://github.com/github/cmark-gfm/security/advisories/GHSA-29g3-96g3-jg6c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-22483","description":"cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to several polynomial time complexity issues in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. Various commands, when piped to cmark-gfm with large values, cause the running time to increase quadratically. These vulnerabilities have been patched in version 0.29.0.gfm.7."}]},{"artifact":{"id":"fa287c7bb04e1dbb","cpes":["cpe:2.3:a:python:urllib3:2.0.7:*:*:*:*:*:*:*"],"name":"urllib3","purl":"pkg:pypi/urllib3@2.0.7","type":"python","version":"2.0.7","language":"python","licenses":[],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.2.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-34jh-p97f-mpxf","versionConstraint":">=2.0.0,<2.2.2 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"urllib3","version":"2.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-34jh-p97f-mpxf","fix":{"state":"fixed","versions":["2.2.2"],"available":[{"date":"2024-06-18","kind":"first-observed","version":"2.2.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.4,"impactScore":3.6,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37891","cwe":"CWE-669","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-37891","date":"2026-10-27","epss":0.01141,"percentile":0.66485}],"risk":0.53627,"urls":["https://github.com/urllib3/urllib3/security/advisories/GHSA-34jh-p97f-mpxf","https://nvd.nist.gov/vuln/detail/CVE-2024-37891","https://github.com/urllib3/urllib3/commit/40b6d1605814dd1db0a46e202d6e56f2e4c9a468","https://github.com/urllib3/urllib3/commit/accff72ecc2f6cf5a76d9570198a93ac7c90270e","https://lists.debian.org/debian-lts-announce/2024/12/msg00020.html","https://security.netapp.com/advisory/ntap-20240822-0003","https://www.vicarius.io/vsociety/posts/proxy-authorization-header-handling-vulnerability-in-urllib3-cve-2024-37891"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-34jh-p97f-mpxf","description":"urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects"},"relatedVulnerabilities":[{"id":"CVE-2024-37891","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.4,"impactScore":3.6,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37891","cwe":"CWE-669","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-37891","date":"2026-10-27","epss":0.01141,"percentile":0.66485}],"urls":["https://github.com/urllib3/urllib3/commit/accff72ecc2f6cf5a76d9570198a93ac7c90270e","https://github.com/urllib3/urllib3/security/advisories/GHSA-34jh-p97f-mpxf","https://lists.debian.org/debian-lts-announce/2024/12/msg00020.html","https://security.netapp.com/advisory/ntap-20240822-0003/","https://www.vicarius.io/vsociety/posts/proxy-authorization-header-handling-vulnerability-in-urllib3-cve-2024-37891"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37891","description":"urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3's proxy support, it's possible to accidentally configure the `Proxy-Authorization` header even though it won't have any effect as the request is not using a forwarding proxy or a tunneling proxy. In those cases, urllib3 doesn't treat the `Proxy-Authorization` HTTP header as one carrying authentication material and thus doesn't strip the header on cross-origin redirects. Because this is a highly unlikely scenario, we believe the severity of this vulnerability is low for almost all users. Out of an abundance of caution urllib3 will automatically strip the `Proxy-Authorization` header during cross-origin redirects to avoid the small chance that users are doing this on accident. Users should use urllib3's proxy support or disable automatic redirects to achieve safe processing of the `Proxy-Authorization` header, but we still decided to strip the header by default in order to further protect users who aren't using the correct approach. We believe the number of usages affected by this advisory is low. It requires all of the following to be true to be exploited: 1. Setting the `Proxy-Authorization` header without using urllib3's built-in proxy support. 2. Not disabling HTTP redirects. 3. Either not using an HTTPS origin server or for the proxy or target origin to redirect to a malicious origin. Users are advised to update to either version 1.26.19 or version 2.2.2. Users unable to upgrade may use the `Proxy-Authorization` header with urllib3's `ProxyManager`, disable HTTP redirects using `redirects=False` when sending requests, or not user the `Proxy-Authorization` header as mitigations."}]},{"artifact":{"id":"4bd0adec6e7440e1","cpes":["cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:node.js:*:*","cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:rust:*:*","cpe:2.3:a:isaacs:tar:6.1.15:*:*:*:*:node.js:*:*"],"name":"tar","purl":"pkg:npm/tar@6.1.15","type":"npm","version":"6.1.15","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"6.2.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-f5x3-32g6-xq36","versionConstraint":"<6.2.1 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"tar","version":"6.1.15"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-f5x3-32g6-xq36","fix":{"state":"fixed","versions":["6.2.1"],"available":[{"date":"2024-04-10","kind":"first-observed","version":"6.2.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28863","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-28863","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-28863","date":"2026-10-27","epss":0.00929,"percentile":0.60395}],"risk":0.534175,"urls":["https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36","https://nvd.nist.gov/vuln/detail/CVE-2024-28863","https://github.com/isaacs/node-tar/commit/fe8cd57da5686f8695415414bda49206a545f7f7","https://security.netapp.com/advisory/ntap-20240524-0005"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-f5x3-32g6-xq36","description":"Denial of service while parsing a tar file due to lack of folders count validation"},"relatedVulnerabilities":[{"id":"CVE-2024-28863","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28863","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-28863","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-28863","date":"2026-10-27","epss":0.00929,"percentile":0.60395}],"urls":["https://github.com/isaacs/node-tar/commit/fe8cd57da5686f8695415414bda49206a545f7f7","https://github.com/isaacs/node-tar/security/advisories/GHSA-f5x3-32g6-xq36","https://security.netapp.com/advisory/ntap-20240524-0005/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28863","description":"node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the folder creation process. An attacker who generates a large number of sub-folders can consume memory on the system running node-tar and even crash the Node.js client within few seconds of running it using a path with too many sub-folders inside. Version 6.2.1 fixes this issue by preventing extraction in excessively deep sub-folders."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-8194","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.6||>= 3.14.0a1, < 3.14.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-8194","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.6||>= 3.14.0a1, < 3.14.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-8194","fix":{"state":"fixed","versions":["3.9.24","3.10.19","3.11.14","3.12.12","3.13.6","3.14.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.24"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.19"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0rc2"},{"date":"2025-10-10","kind":"first-observed","version":"3.9.24"},{"date":"2025-10-10","kind":"first-observed","version":"3.10.19"},{"date":"2025-10-10","kind":"first-observed","version":"3.11.14"},{"date":"2025-10-10","kind":"first-observed","version":"3.12.12"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0rc2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-8194","cwe":"CWE-835","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-8194","date":"2026-10-27","epss":0.00708,"percentile":0.53273}],"risk":0.531,"urls":["https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1","https://github.com/python/cpython/commit/57f5981d6260ed21266e0c26951b8564cc252bc2","https://github.com/python/cpython/commit/7040aa54f14676938970e10c5f74ea93cd56aa38","https://github.com/python/cpython/commit/73f03e4808206f71eb6b92c579505a220942ef19","https://github.com/python/cpython/commit/b4ec17488eedec36d3c05fec127df71c0071f6cb","https://github.com/python/cpython/commit/c9d9f78feb1467e73fd29356c040bde1c104f29f","https://github.com/python/cpython/commit/cdae923ffe187d6ef916c0f665a31249619193fe","https://github.com/python/cpython/commit/fbc2a0ca9ac8aff6887f8ddf79b87b4510277227","https://github.com/python/cpython/issues/130577","https://github.com/python/cpython/pull/137027","https://mail.python.org/archives/list/security-announce@python.org/thread/ZULLF3IZ726XP5EY7XJ7YIN3K5MDYR2D/","http://www.openwall.com/lists/oss-security/2025/07/28/1","http://www.openwall.com/lists/oss-security/2025/07/28/2","https://github.com/python/cpython/pull/57f5981d6260ed21266e0c26951b8564cc252bc2","https://github.com/python/cpython/pull/73f03e4808206f71eb6b92c579505a220942ef19","https://github.com/python/cpython/pull/b4ec17488eedec36d3c05fec127df71c0071f6cb","https://github.com/python/cpython/pull/c9d9f78feb1467e73fd29356c040bde1c104f29f","https://github.com/python/cpython/pull/cdae923ffe187d6ef916c0f665a31249619193fe","https://github.com/python/cpython/pull/fbc2a0ca9ac8aff6887f8ddf79b87b4510277227"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-8194","description":"There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. \n\nThis vulnerability can be mitigated by including the following patch after importing the “tarfile” module:  https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1"},"relatedVulnerabilities":[]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-34182","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-34182","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-34182","cwe":"CWE-354","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34182","date":"2026-10-27","epss":0.01057,"percentile":0.64278}],"risk":0.5285,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34182"},"relatedVulnerabilities":[{"id":"CVE-2026-34182","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34182","cwe":"CWE-354","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34182","date":"2026-10-27","epss":0.01057,"percentile":0.64278}],"urls":["https://github.com/openssl/openssl/commit/03c1f4d45fb963aee7d5833390c507cd290182bc","https://github.com/openssl/openssl/commit/439ed7d2c0962ce964482727264668bf277c333f","https://github.com/openssl/openssl/commit/7947e6a81eb8776802f159fb6762cb7fcf7e34c7","https://github.com/openssl/openssl/commit/9fd97f8cfdc2c0be214998de3b2b55c8edf6c7ac","https://github.com/openssl/openssl/commit/d2ca86bcd43e4f17d899f347101766b6107676e0","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34182","description":"Issue Summary: Cryptographic Message Services (CMS) processing fails to perform\nsufficient input validation on the cipher and tag length fields of\nAuthEnvelopedData containers, leading to various potential compromises.\n\nImpact Summary: Attackers making use of these vulnerabilities may achieve\nkey-equivalent functionality for a given CMS recipient and/or bypass integrity\nvalidation for a given message.\n\nIn one use case, an attacker may send a CMS message containing\nAuthEnvelopedData with the cipher specified as a non-AEAD cipher.  OpenSSL\nerroneously allows this selection, and attempts to decrypt and validate the\nmessage.\n\nAn on-path attacker who captures one legitimate AES-GCM AuthEnvelopedData\naddressed to the victim can re-emit it with the recipientInfos set left\nbyte-for-byte intact, so the victim's private key still unwraps the genuine CEK\n(the content-encryption key), but with the inner OID rewritten to AES-256-OFB\n(Output Feedback Mode, an unauthenticated keystream mode) and with an\nattacker-chosen IV and ciphertext. The victim initializes AES-256-OFB under the\nreal CEK, never consults the MAC field, and CMS_decrypt() returns success.\n\nIf the application under attack responds to the attacker with any indicator\nshowing success or failure of the decryption effort, it is possible for the\nattacker to use this as an oracle to obtain key equivalent functionality for the\nCEK used for the chosen recipient of the message.\n\nIn another use case, an attacker can reduce the tag length of the chosen AEAD\ncipher for a given AuthEnvelopedData container to be a single byte long,\nallowing an attacker to brute force CMS decryption, producing an integrity\nbypass for applications that trust CMS_decrypt() to reject modified content.\n\nThe FIPS modules are not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-34182","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-34182","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-34182","cwe":"CWE-354","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34182","date":"2026-10-27","epss":0.01057,"percentile":0.64278}],"risk":0.5285,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34182"},"relatedVulnerabilities":[{"id":"CVE-2026-34182","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34182","cwe":"CWE-354","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34182","date":"2026-10-27","epss":0.01057,"percentile":0.64278}],"urls":["https://github.com/openssl/openssl/commit/03c1f4d45fb963aee7d5833390c507cd290182bc","https://github.com/openssl/openssl/commit/439ed7d2c0962ce964482727264668bf277c333f","https://github.com/openssl/openssl/commit/7947e6a81eb8776802f159fb6762cb7fcf7e34c7","https://github.com/openssl/openssl/commit/9fd97f8cfdc2c0be214998de3b2b55c8edf6c7ac","https://github.com/openssl/openssl/commit/d2ca86bcd43e4f17d899f347101766b6107676e0","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34182","description":"Issue Summary: Cryptographic Message Services (CMS) processing fails to perform\nsufficient input validation on the cipher and tag length fields of\nAuthEnvelopedData containers, leading to various potential compromises.\n\nImpact Summary: Attackers making use of these vulnerabilities may achieve\nkey-equivalent functionality for a given CMS recipient and/or bypass integrity\nvalidation for a given message.\n\nIn one use case, an attacker may send a CMS message containing\nAuthEnvelopedData with the cipher specified as a non-AEAD cipher.  OpenSSL\nerroneously allows this selection, and attempts to decrypt and validate the\nmessage.\n\nAn on-path attacker who captures one legitimate AES-GCM AuthEnvelopedData\naddressed to the victim can re-emit it with the recipientInfos set left\nbyte-for-byte intact, so the victim's private key still unwraps the genuine CEK\n(the content-encryption key), but with the inner OID rewritten to AES-256-OFB\n(Output Feedback Mode, an unauthenticated keystream mode) and with an\nattacker-chosen IV and ciphertext. The victim initializes AES-256-OFB under the\nreal CEK, never consults the MAC field, and CMS_decrypt() returns success.\n\nIf the application under attack responds to the attacker with any indicator\nshowing success or failure of the decryption effort, it is possible for the\nattacker to use this as an oracle to obtain key equivalent functionality for the\nCEK used for the chosen recipient of the message.\n\nIn another use case, an attacker can reduce the tag length of the chosen AEAD\ncipher for a given AuthEnvelopedData container to be a single byte long,\nallowing an attacker to brute force CMS decryption, producing an integrity\nbypass for applications that trust CMS_decrypt() to reject modified content.\n\nThe FIPS modules are not affected by this issue."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42010","versionConstraint":"< 3.7.3-4ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-42010","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.9"],"available":[{"date":"2026-05-20","kind":"advisory","version":"3.7.3-4ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-42010","cwe":"CWE-170","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-42010","cwe":"CWE-626","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-42010","cwe":"CWE-170","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42010","date":"2026-10-27","epss":0.0105,"percentile":0.64106}],"risk":0.525,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42010"},"relatedVulnerabilities":[{"id":"CVE-2026-42010","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42010","cwe":"CWE-170","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-42010","cwe":"CWE-626","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-42010","cwe":"CWE-170","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42010","date":"2026-10-27","epss":0.0105,"percentile":0.64106}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:34764","https://access.redhat.com/errata/RHSA-2026:34788","https://access.redhat.com/errata/RHSA-2026:34790","https://access.redhat.com/errata/RHSA-2026:36004","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:62409","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:67857","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-42010","https://bugzilla.redhat.com/show_bug.cgi?id=2467289","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42010.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42010","description":"A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.23"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-31790","versionConstraint":"< 3.0.2-0ubuntu1.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-31790","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.23"],"available":[{"date":"2026-04-08","kind":"advisory","version":"3.0.2-0ubuntu1.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-31790","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-31790","date":"2026-10-27","epss":0.0103,"percentile":0.6355}],"risk":0.515,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-31790"},"relatedVulnerabilities":[{"id":"CVE-2026-31790","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-31790","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-31790","date":"2026-10-27","epss":0.0103,"percentile":0.6355}],"urls":["https://github.com/openssl/openssl/commit/001e01db3e996e13ffc72386fe79d03a6683b5ac","https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482","https://github.com/openssl/openssl/commit/b922e24e5b23ffb9cb9e14cadff23d91e9f7e406","https://github.com/openssl/openssl/commit/d5f8e71cd0a54e961d0c3b174348f8308486f790","https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-31790","description":"Issue summary: Applications using RSASVE key encapsulation to establish\na secret encryption key can send contents of an uninitialized memory buffer to\na malicious peer.\n\nImpact summary: The uninitialized buffer might contain sensitive data from the\nprevious execution of the application process which leads to sensitive data\nleakage to an attacker.\n\nRSA_public_encrypt() returns the number of bytes written on success and -1\non error. The affected code tests only whether the return value is non-zero.\nAs a result, if RSA encryption fails, encapsulation can still return success to\nthe caller, set the output lengths, and leave the caller to use the contents of\nthe ciphertext buffer as if a valid KEM ciphertext had been produced.\n\nIf applications use EVP_PKEY_encapsulate() with RSA/RSASVE on an\nattacker-supplied invalid RSA public key without first validating that key,\nthen this may cause stale or uninitialized contents of the caller-provided\nciphertext buffer to be disclosed to the attacker in place of the KEM\nciphertext.\n\nAs a workaround calling EVP_PKEY_public_check() or\nEVP_PKEY_public_check_quick() before EVP_PKEY_encapsulate() will mitigate\nthe issue.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.1 and 3.0 are affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.23"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-31790","versionConstraint":"< 3.0.2-0ubuntu1.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-31790","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.23"],"available":[{"date":"2026-04-08","kind":"advisory","version":"3.0.2-0ubuntu1.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-31790","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-31790","date":"2026-10-27","epss":0.0103,"percentile":0.6355}],"risk":0.515,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-31790"},"relatedVulnerabilities":[{"id":"CVE-2026-31790","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-31790","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-31790","date":"2026-10-27","epss":0.0103,"percentile":0.6355}],"urls":["https://github.com/openssl/openssl/commit/001e01db3e996e13ffc72386fe79d03a6683b5ac","https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482","https://github.com/openssl/openssl/commit/b922e24e5b23ffb9cb9e14cadff23d91e9f7e406","https://github.com/openssl/openssl/commit/d5f8e71cd0a54e961d0c3b174348f8308486f790","https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-31790","description":"Issue summary: Applications using RSASVE key encapsulation to establish\na secret encryption key can send contents of an uninitialized memory buffer to\na malicious peer.\n\nImpact summary: The uninitialized buffer might contain sensitive data from the\nprevious execution of the application process which leads to sensitive data\nleakage to an attacker.\n\nRSA_public_encrypt() returns the number of bytes written on success and -1\non error. The affected code tests only whether the return value is non-zero.\nAs a result, if RSA encryption fails, encapsulation can still return success to\nthe caller, set the output lengths, and leave the caller to use the contents of\nthe ciphertext buffer as if a valid KEM ciphertext had been produced.\n\nIf applications use EVP_PKEY_encapsulate() with RSA/RSASVE on an\nattacker-supplied invalid RSA public key without first validating that key,\nthen this may cause stale or uninitialized contents of the caller-provided\nciphertext buffer to be disclosed to the attacker in place of the KEM\nciphertext.\n\nAs a workaround calling EVP_PKEY_public_check() or\nEVP_PKEY_public_check_quick() before EVP_PKEY_encapsulate() will mitigate\nthe issue.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.1 and 3.0 are affected by this issue."}]},{"artifact":{"id":"680ad1ef8d2de90f","cpes":["cpe:2.3:a:libcmark-gfm-extensions0.29.0.gfm.3:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm-extensions0.29.0.gfm.3:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm_extensions0.29.0.gfm.3:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm_extensions0.29.0.gfm.3:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*"],"name":"libcmark-gfm-extensions0.29.0.gfm.3","purl":"pkg:deb/ubuntu/libcmark-gfm-extensions0.29.0.gfm.3@0.29.0.gfm.3-3?arch=amd64&distro=ubuntu-22.04&upstream=cmark-gfm","type":"deb","version":"0.29.0.gfm.3-3","language":"","licenses":["Apache","BSD-2-clause","CC-BY-SA-4.0","Expat","Unicode"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcmark-gfm-extensions0.29.0.gfm.3/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/libcmark-gfm-extensions0.29.0.gfm.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcmark-gfm-extensions0.29.0.gfm.3:amd64.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/libcmark-gfm-extensions0.29.0.gfm.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cmark-gfm"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-26485","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"cmark-gfm","version":"0.29.0.gfm.3-3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-26485","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-26485","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-26485","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-26485","date":"2026-10-27","epss":0.01029,"percentile":0.63523}],"risk":0.5145000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-26485"},"relatedVulnerabilities":[{"id":"CVE-2023-26485","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-26485","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-26485","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-26485","date":"2026-10-27","epss":0.01029,"percentile":0.63523}],"urls":["https://github.com/github/cmark-gfm/commit/07a66c9bc341f902878e37d7da8647d6ef150987","https://github.com/github/cmark-gfm/security/advisories/GHSA-r8vr-c48j-fcc5"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-26485","description":"cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when parsing text which leads with either large numbers of `_` characters. This issue has been addressed in version 0.29.0.gfm.10. Users are advised to upgrade. Users unable to upgrade should validate that their input comes from trusted sources.\n\n\n\n\n### Impact\n\nA polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service.\n\n### Proof of concept\n\n```\n$ ~/cmark-gfm$ python3 -c 'pad = \"_\" * 100000; print(pad + \".\" + pad, end=\"\")' | time ./build/src/cmark-gfm --to plaintext\n```\n\nIncreasing the number 10000 in the above commands causes the running time to increase quadratically.\n\n### Patches\n\nThis vulnerability have been patched in 0.29.0.gfm.10.\n\n### Note on cmark and cmark-gfm\n\nXXX: TBD\n\n[cmark-gfm](https://github.com/github/cmark-gfm) is a fork of [cmark](https://github.com/commonmark/cmark) that adds the GitHub Flavored Markdown extensions. The two codebases have diverged over time, but share a common core. These bugs affect both `cmark` and `cmark-gfm`. \n\n### Credit\n\nWe would like to thank @gravypod for reporting this vulnerability.\n\n### References\n\nhttps://en.wikipedia.org/wiki/Time_complexity\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [github/cmark-gfm](https://github.com/github/cmark-gfm)"}]},{"artifact":{"id":"15a5ed723d6f6533","cpes":["cpe:2.3:a:libcmark-gfm0.29.0.gfm.3:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm0.29.0.gfm.3:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm0.29.0.gfm.3:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm0.29.0.gfm.3:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*"],"name":"libcmark-gfm0.29.0.gfm.3","purl":"pkg:deb/ubuntu/libcmark-gfm0.29.0.gfm.3@0.29.0.gfm.3-3?arch=amd64&distro=ubuntu-22.04&upstream=cmark-gfm","type":"deb","version":"0.29.0.gfm.3-3","language":"","licenses":["Apache","BSD-2-clause","CC-BY-SA-4.0","Expat","Unicode"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcmark-gfm0.29.0.gfm.3/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/libcmark-gfm0.29.0.gfm.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcmark-gfm0.29.0.gfm.3:amd64.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/libcmark-gfm0.29.0.gfm.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cmark-gfm"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-26485","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"cmark-gfm","version":"0.29.0.gfm.3-3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-26485","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-26485","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-26485","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-26485","date":"2026-10-27","epss":0.01029,"percentile":0.63523}],"risk":0.5145000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-26485"},"relatedVulnerabilities":[{"id":"CVE-2023-26485","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-26485","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-26485","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-26485","date":"2026-10-27","epss":0.01029,"percentile":0.63523}],"urls":["https://github.com/github/cmark-gfm/commit/07a66c9bc341f902878e37d7da8647d6ef150987","https://github.com/github/cmark-gfm/security/advisories/GHSA-r8vr-c48j-fcc5"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-26485","description":"cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity issues when parsing text which leads with either large numbers of `_` characters. This issue has been addressed in version 0.29.0.gfm.10. Users are advised to upgrade. Users unable to upgrade should validate that their input comes from trusted sources.\n\n\n\n\n### Impact\n\nA polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service.\n\n### Proof of concept\n\n```\n$ ~/cmark-gfm$ python3 -c 'pad = \"_\" * 100000; print(pad + \".\" + pad, end=\"\")' | time ./build/src/cmark-gfm --to plaintext\n```\n\nIncreasing the number 10000 in the above commands causes the running time to increase quadratically.\n\n### Patches\n\nThis vulnerability have been patched in 0.29.0.gfm.10.\n\n### Note on cmark and cmark-gfm\n\nXXX: TBD\n\n[cmark-gfm](https://github.com/github/cmark-gfm) is a fork of [cmark](https://github.com/commonmark/cmark) that adds the GitHub Flavored Markdown extensions. The two codebases have diverged over time, but share a common core. These bugs affect both `cmark` and `cmark-gfm`. \n\n### Credit\n\nWe would like to thank @gravypod for reporting this vulnerability.\n\n### References\n\nhttps://en.wikipedia.org/wiki/Time_complexity\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [github/cmark-gfm](https://github.com/github/cmark-gfm)"}]},{"artifact":{"id":"caa129f4dfb84903","cpes":["cpe:2.3:a:armin_ronacher_project:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher_project:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher_project:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:jinja2:3.1.2:*:*:*:*:*:*:*"],"name":"jinja2","purl":"pkg:pypi/jinja2@3.1.2","type":"python","version":"3.1.2","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h75v-3vvj-5mfj","versionConstraint":"<3.1.4 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jinja2","version":"3.1.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-h75v-3vvj-5mfj","fix":{"state":"fixed","versions":["3.1.4"],"available":[{"date":"2024-05-07","kind":"first-observed","version":"3.1.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34064","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-34064","date":"2026-10-27","epss":0.00979,"percentile":0.62005}],"risk":0.5090800000000001,"urls":["https://github.com/pallets/jinja/security/advisories/GHSA-h75v-3vvj-5mfj","https://github.com/pallets/jinja/commit/0668239dc6b44ef38e7a6c9f91f312fd4ca581cb","https://nvd.nist.gov/vuln/detail/CVE-2024-34064","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/567XIGSZMABG6TSMYWD7MIYNJSUQQRUC","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCLF44KY43BSVMTE6S53B4V5WP3FRRSE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS","https://lists.debian.org/debian-lts-announce/2024/12/msg00009.html"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h75v-3vvj-5mfj","description":"Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter"},"relatedVulnerabilities":[{"id":"CVE-2024-34064","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34064","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-34064","date":"2026-10-27","epss":0.00979,"percentile":0.62005}],"urls":["https://github.com/pallets/jinja/commit/0668239dc6b44ef38e7a6c9f91f312fd4ca581cb","https://github.com/pallets/jinja/security/advisories/GHSA-h75v-3vvj-5mfj","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/567XIGSZMABG6TSMYWD7MIYNJSUQQRUC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCLF44KY43BSVMTE6S53B4V5WP3FRRSE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS/","https://lists.debian.org/debian-lts-announce/2024/12/msg00009.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34064","description":"Jinja is an extensible templating engine. The `xmlattr` filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, `/`, `>`, or `=`, as each would then be interpreted as starting a separate attribute. If an application accepts keys (as opposed to only values) as user input, and renders these in pages that other users see as well, an attacker could use this to inject other attributes and perform XSS. The fix for CVE-2024-22195 only addressed spaces but not other characters. Accepting keys as user input is now explicitly considered an unintended use case of the `xmlattr` filter, and code that does so without otherwise validating the input should be flagged as insecure, regardless of Jinja version. Accepting _values_ as user input continues to be safe. This vulnerability is fixed in 3.1.4."}]},{"artifact":{"id":"c08fe2fe58d4c369","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyterlab:4.0.7:*:*:*:*:*:*:*"],"name":"jupyterlab","purl":"pkg:pypi/jupyterlab@4.0.7","type":"python","version":"4.0.7","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.0.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-44cc-43rp-5947","versionConstraint":">=4.0.0,<=4.0.10 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyterlab","version":"4.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-44cc-43rp-5947","fix":{"state":"fixed","versions":["4.0.11"],"available":[{"date":"2024-01-20","kind":"first-observed","version":"4.0.11"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22421","cwe":"CWE-23","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22421","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-22421","date":"2026-10-27","epss":0.0067,"percentile":0.51785}],"risk":0.50585,"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-44cc-43rp-5947","https://github.com/jupyterlab/jupyterlab/commit/1ef7a4fa0202ebdf663e1cc0b45c8813a34a0b96","https://github.com/jupyterlab/jupyterlab/commit/fccd83dc4441da0384ee3fd1322c3b2d9ad4caaa","https://nvd.nist.gov/vuln/detail/CVE-2024-22421","https://github.com/jupyterlab/jupyterlab/commit/19bd9b96cb2e77170a67e43121637d0b5619e8c6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQJKNRDRFMKGVRIYNNN6CKMNJDNYWO2H/"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-44cc-43rp-5947","description":"JupyterLab vulnerable to potential authentication and CSRF tokens leak"},"relatedVulnerabilities":[{"id":"CVE-2024-22421","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22421","cwe":"CWE-23","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22421","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-22421","date":"2026-10-27","epss":0.0067,"percentile":0.51785}],"urls":["https://github.com/jupyterlab/jupyterlab/commit/19bd9b96cb2e77170a67e43121637d0b5619e8c6","https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-44cc-43rp-5947","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQJKNRDRFMKGVRIYNNN6CKMNJDNYWO2H/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22421","description":"JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. Users of JupyterLab who click on a malicious link may get their `Authorization` and `XSRFToken` tokens exposed to a third party when running an older `jupyter-server` version. JupyterLab versions 4.1.0b2, 4.0.11, and 3.6.7 are patched. No workaround has been identified, however users should ensure to upgrade `jupyter-server` to version 2.7.2 or newer which includes a redirect vulnerability fix."}]},{"artifact":{"id":"01853ae3313818ca","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:notebook:7.0.6:*:*:*:*:*:*:*"],"name":"notebook","purl":"pkg:pypi/notebook@7.0.6","type":"python","version":"7.0.6","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.0.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-44cc-43rp-5947","versionConstraint":">=7.0.0,<=7.0.6 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"notebook","version":"7.0.6"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-44cc-43rp-5947","fix":{"state":"fixed","versions":["7.0.7"],"available":[{"date":"2024-01-20","kind":"first-observed","version":"7.0.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22421","cwe":"CWE-23","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22421","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-22421","date":"2026-10-27","epss":0.0067,"percentile":0.51785}],"risk":0.50585,"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-44cc-43rp-5947","https://github.com/jupyterlab/jupyterlab/commit/1ef7a4fa0202ebdf663e1cc0b45c8813a34a0b96","https://github.com/jupyterlab/jupyterlab/commit/fccd83dc4441da0384ee3fd1322c3b2d9ad4caaa","https://nvd.nist.gov/vuln/detail/CVE-2024-22421","https://github.com/jupyterlab/jupyterlab/commit/19bd9b96cb2e77170a67e43121637d0b5619e8c6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQJKNRDRFMKGVRIYNNN6CKMNJDNYWO2H/"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-44cc-43rp-5947","description":"JupyterLab vulnerable to potential authentication and CSRF tokens leak"},"relatedVulnerabilities":[{"id":"CVE-2024-22421","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22421","cwe":"CWE-23","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22421","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-22421","date":"2026-10-27","epss":0.0067,"percentile":0.51785}],"urls":["https://github.com/jupyterlab/jupyterlab/commit/19bd9b96cb2e77170a67e43121637d0b5619e8c6","https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-44cc-43rp-5947","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQJKNRDRFMKGVRIYNNN6CKMNJDNYWO2H/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22421","description":"JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. Users of JupyterLab who click on a malicious link may get their `Authorization` and `XSRFToken` tokens exposed to a third party when running an older `jupyter-server` version. JupyterLab versions 4.1.0b2, 4.0.11, and 3.6.7 are patched. No workaround has been identified, however users should ensure to upgrade `jupyter-server` to version 2.7.2 or newer which includes a redirect vulnerability fix."}]},{"artifact":{"id":"4bd0adec6e7440e1","cpes":["cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:node.js:*:*","cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:rust:*:*","cpe:2.3:a:isaacs:tar:6.1.15:*:*:*:*:node.js:*:*"],"name":"tar","purl":"pkg:npm/tar@6.1.15","type":"npm","version":"6.1.15","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.19"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-23hp-3jrh-7fpw","versionConstraint":"<=7.5.18 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"tar","version":"6.1.15"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-23hp-3jrh-7fpw","fix":{"state":"fixed","versions":["7.5.19"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"7.5.19"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59873","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59873","date":"2026-10-27","epss":0.00582,"percentile":0.47601}],"risk":0.5048849999999999,"urls":["https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw","https://nvd.nist.gov/vuln/detail/CVE-2026-59873","https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3","https://github.com/isaacs/node-tar/releases/tag/v7.5.19"],"severity":"Critical","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-23hp-3jrh-7fpw","description":"node-tar: Decompression/parse DoS via unlimited input"},"relatedVulnerabilities":[{"id":"CVE-2026-59873","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59873","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59873","date":"2026-10-27","epss":0.00582,"percentile":0.47601}],"urls":["https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3","https://github.com/isaacs/node-tar/releases/tag/v7.5.19","https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59873","description":"node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19."}]},{"artifact":{"id":"87c906b2b15d57d1","cpes":["cpe:2.3:a:python:requests:2.31.0:*:*:*:*:*:*:*"],"name":"requests","purl":"pkg:pypi/requests@2.31.0","type":"python","version":"2.31.0","language":"python","licenses":["Apache 2.0"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.32.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9hjg-9r4m-mvj7","versionConstraint":"<2.32.4 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"requests","version":"2.31.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-9hjg-9r4m-mvj7","fix":{"state":"fixed","versions":["2.32.4"],"available":[{"date":"2025-06-10","kind":"first-observed","version":"2.32.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47081","cwe":"CWE-522","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-47081","date":"2026-10-27","epss":0.0098,"percentile":0.62033}],"risk":0.5047,"urls":["https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7","https://nvd.nist.gov/vuln/detail/CVE-2024-47081","https://github.com/psf/requests/pull/6965","https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef","https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env","https://seclists.org/fulldisclosure/2025/Jun/2","http://www.openwall.com/lists/oss-security/2025/06/03/11","http://www.openwall.com/lists/oss-security/2025/06/03/9","http://www.openwall.com/lists/oss-security/2025/06/04/1","http://www.openwall.com/lists/oss-security/2025/06/04/6","https://github.com/psf/requests","https://github.com/psf/requests/releases/tag/v2.32.4","https://github.com/pypa/advisory-database/tree/main/vulns/requests/PYSEC-2026-1872.yaml","https://pypi.org/project/requests"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9hjg-9r4m-mvj7","description":"Requests vulnerable to .netrc credentials leak via malicious URLs"},"relatedVulnerabilities":[{"id":"CVE-2024-47081","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47081","cwe":"CWE-522","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-47081","date":"2026-10-27","epss":0.0098,"percentile":0.62033}],"urls":["https://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef","https://github.com/psf/requests/pull/6965","https://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7","https://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env","https://seclists.org/fulldisclosure/2025/Jun/2","http://seclists.org/fulldisclosure/2025/Jun/2","http://www.openwall.com/lists/oss-security/2025/06/03/11","http://www.openwall.com/lists/oss-security/2025/06/03/9","http://www.openwall.com/lists/oss-security/2025/06/04/1","http://www.openwall.com/lists/oss-security/2025/06/04/6"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-47081","description":"Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4224","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4224","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-4224","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.13","3.14.4","3.15.0a8"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a8"},{"date":"2026-09-15","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.14"},{"date":"2026-04-10","kind":"first-observed","version":"3.13.13"},{"date":"2026-04-10","kind":"first-observed","version":"3.14.4"},{"date":"2026-04-10","kind":"first-observed","version":"3.15.0a8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4224","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-4224","date":"2026-10-27","epss":0.00702,"percentile":0.53047}],"risk":0.500175,"urls":["https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a","https://github.com/python/cpython/commit/24ce88b285f56ee11626cf5e472af3cd8cc7c621","https://github.com/python/cpython/commit/642865ddf4b232da1f3b1f7abcfa3254c4bfe785","https://github.com/python/cpython/commit/af856a7177326ac25d9f66cc6dd28b554d914fee","https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3","https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768","https://github.com/python/cpython/issues/145986","https://github.com/python/cpython/pull/145987","https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/","http://www.openwall.com/lists/oss-security/2026/03/16/4"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4224","description":"When an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs."},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-15308","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-15308","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-15308","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b4"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b4"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-19","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-19","kind":"first-observed","version":"3.14.7"},{"date":"2026-08-19","kind":"first-observed","version":"3.15.0b4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15308","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15308","date":"2026-10-27","epss":0.00637,"percentile":0.50319}],"risk":0.49686,"urls":["https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9","https://github.com/python/cpython/commit/1e7956f1a722df9aabc509c30f8fbdc3a2b4fdc7","https://github.com/python/cpython/commit/785df8f743800661961528970f8598edcd291c14","https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced","https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606","https://github.com/python/cpython/commit/c2390b9376e35a701ed3acc597b8fc87546c9b00","https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd","https://github.com/python/cpython/issues/153030","https://github.com/python/cpython/pull/153031","https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/","http://www.openwall.com/lists/oss-security/2026/07/09/4"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15308","description":"The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data."},"relatedVulnerabilities":[]},{"artifact":{"id":"45f87362b5437c73","cpes":["cpe:2.3:a:hsiaoming_yang_\\<me_project:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:mistune:3.0.1:*:*:*:*:*:*:*"],"name":"mistune","purl":"pkg:pypi/mistune@3.0.1","type":"python","version":"3.0.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.3.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-ffq3-xpv3-j92q","versionConstraint":"<3.3.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mistune","version":"3.0.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-ffq3-xpv3-j92q","fix":{"state":"fixed","versions":["3.3.0"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"3.3.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59928","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59928","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59928","date":"2026-10-27","epss":0.00651,"percentile":0.50987}],"risk":0.48824999999999996,"urls":["https://github.com/lepture/mistune/security/advisories/GHSA-ffq3-xpv3-j92q","https://nvd.nist.gov/vuln/detail/CVE-2026-59928","https://github.com/lepture/mistune/commit/2b04d7ba341c16ac78fe82d3076bdd5c3de87c69","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/pypa/advisory-database/tree/main/vulns/mistune/PYSEC-2026-2216.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-ffq3-xpv3-j92q","description":"Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions"},"relatedVulnerabilities":[{"id":"CVE-2026-59928","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59928","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59928","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59928","date":"2026-10-27","epss":0.00651,"percentile":0.50987}],"urls":["https://github.com/lepture/mistune/commit/2b04d7ba341c16ac78fe82d3076bdd5c3de87c69","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/lepture/mistune/security/advisories/GHSA-ffq3-xpv3-j92q"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59928","description":"Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repeated or distinct reference-link definitions causes quadratic work in src/mistune/block_parser.py and the ref_links environment dictionary handling, allowing denial of service through CPU exhaustion. This issue is fixed in version 3.3.0."}]},{"artifact":{"id":"4192b772fea9db3e","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.18"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rgw5-rvv9-x895","versionConstraint":"<1.1.18 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-rgw5-rvv9-x895","fix":{"state":"fixed","versions":["1.1.18"],"available":[{"date":"2026-08-03","kind":"first-observed","version":"1.1.18"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-69152","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-69152","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-69152","date":"2026-10-27","epss":0.00647,"percentile":0.50786}],"risk":0.48525,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895","https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac","https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf","https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","https://nvd.nist.gov/vuln/detail/CVE-2026-69152"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","description":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"},"relatedVulnerabilities":[{"id":"CVE-2026-69152","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-69152","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-69152","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-69152","date":"2026-10-27","epss":0.00647,"percentile":0.50786}],"urls":["https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac","https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf","https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-69152","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9."}]},{"artifact":{"id":"77066e7e6d2a4d57","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.18"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rgw5-rvv9-x895","versionConstraint":"<1.1.18 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-rgw5-rvv9-x895","fix":{"state":"fixed","versions":["1.1.18"],"available":[{"date":"2026-08-03","kind":"first-observed","version":"1.1.18"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-69152","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-69152","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-69152","date":"2026-10-27","epss":0.00647,"percentile":0.50786}],"risk":0.48525,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895","https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac","https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf","https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","https://nvd.nist.gov/vuln/detail/CVE-2026-69152"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","description":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"},"relatedVulnerabilities":[{"id":"CVE-2026-69152","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-69152","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-69152","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-69152","date":"2026-10-27","epss":0.00647,"percentile":0.50786}],"urls":["https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac","https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf","https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-69152","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9."}]},{"artifact":{"id":"fa77c1473ae8947b","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.1.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rgw5-rvv9-x895","versionConstraint":">=2.0.0,<2.1.4 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-rgw5-rvv9-x895","fix":{"state":"fixed","versions":["2.1.4"],"available":[{"date":"2026-08-03","kind":"first-observed","version":"2.1.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-69152","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-69152","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-69152","date":"2026-10-27","epss":0.00647,"percentile":0.50786}],"risk":0.48525,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895","https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac","https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf","https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","https://nvd.nist.gov/vuln/detail/CVE-2026-69152"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","description":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"},"relatedVulnerabilities":[{"id":"CVE-2026-69152","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-69152","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-69152","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-69152","date":"2026-10-27","epss":0.00647,"percentile":0.50786}],"urls":["https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac","https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf","https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-69152","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9."}]},{"artifact":{"id":"b08ada23090bcd4d","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.1.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rgw5-rvv9-x895","versionConstraint":">=2.0.0,<2.1.4 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-rgw5-rvv9-x895","fix":{"state":"fixed","versions":["2.1.4"],"available":[{"date":"2026-08-03","kind":"first-observed","version":"2.1.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-69152","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-69152","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-69152","date":"2026-10-27","epss":0.00647,"percentile":0.50786}],"risk":0.48525,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895","https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac","https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf","https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","https://nvd.nist.gov/vuln/detail/CVE-2026-69152"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rgw5-rvv9-x895","description":"brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"},"relatedVulnerabilities":[{"id":"CVE-2026-69152","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-69152","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-69152","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-69152","date":"2026-10-27","epss":0.00647,"percentile":0.50786}],"urls":["https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac","https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf","https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-69152","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9."}]},{"artifact":{"id":"bb8300909382e0a4","cpes":["cpe:2.3:a:fedorindutny:ip:2.0.0:*:*:*:*:node.js:*:*"],"name":"ip","purl":"pkg:npm/ip@2.0.0","type":"npm","version":"2.0.0","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/ip/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/ip/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.0.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-78xj-cgh5-2h22","versionConstraint":"=2.0.0 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"ip","version":"2.0.0"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-78xj-cgh5-2h22","fix":{"state":"fixed","versions":["2.0.1"],"available":[{"date":"2024-02-21","kind":"first-observed","version":"2.0.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-42282","cwe":"CWE-918","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-42282","cwe":"CWE-918","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-42282","date":"2026-10-27","epss":0.01613,"percentile":0.75844}],"risk":0.48389999999999994,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-42282","https://cosmosofcyberspace.github.io/npm_ip_cve/npm_ip_cve.html","https://github.com/JoshGlazebrook/socks/issues/93#issue-2128357447","https://github.com/github/advisory-database/pull/3504#issuecomment-1937179999","https://github.com/indutny/node-ip/pull/138","https://github.com/indutny/node-ip/commit/32f468f1245574785ec080705737a579be1223aa","https://github.com/indutny/node-ip/commit/6a3ada9b471b09d5f0f5be264911ab564bf67894"],"severity":"Low","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-78xj-cgh5-2h22","description":"NPM IP package incorrectly identifies some private IP addresses as public"},"relatedVulnerabilities":[{"id":"CVE-2023-42282","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-42282","cwe":"CWE-918","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-42282","cwe":"CWE-918","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-42282","date":"2026-10-27","epss":0.01613,"percentile":0.75844}],"urls":["https://cosmosofcyberspace.github.io/npm_ip_cve/npm_ip_cve.html","https://github.com/indutny/node-ip/commit/6a3ada9b471b09d5f0f5be264911ab564bf67894","https://huntr.com/bounties/bfc3b23f-ddc0-4ee7-afab-223b07115ed3/","https://security.netapp.com/advisory/ntap-20240315-0008/","https://www.bleepingcomputer.com/news/security/dev-rejects-cve-severity-makes-his-github-repo-read-only/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-42282","description":"The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-7210","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-7210","fix":{"state":"fixed","versions":["3.10.22","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b2"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-05","kind":"first-observed","version":"3.15.0b2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-10-27","epss":0.00672,"percentile":0.51845}],"risk":0.48383999999999994,"urls":["https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4","https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566","https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56","https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b","https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286","https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a","https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f","https://github.com/python/cpython/issues/149018","https://github.com/python/cpython/pull/149023","https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/","http://www.openwall.com/lists/oss-security/2026/05/11/13","http://www.openwall.com/lists/oss-security/2026/05/11/8"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","description":"`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch."},"relatedVulnerabilities":[]},{"artifact":{"id":"45f87362b5437c73","cpes":["cpe:2.3:a:hsiaoming_yang_\\<me_project:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:mistune:3.0.1:*:*:*:*:*:*:*"],"name":"mistune","purl":"pkg:pypi/mistune@3.0.1","type":"python","version":"3.0.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.3.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c8j7-8cv4-2xmq","versionConstraint":"<3.3.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mistune","version":"3.0.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-c8j7-8cv4-2xmq","fix":{"state":"fixed","versions":["3.3.0"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"3.3.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59922","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59922","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59922","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-59922","date":"2026-10-27","epss":0.00644,"percentile":0.5066}],"risk":0.483,"urls":["https://github.com/lepture/mistune/security/advisories/GHSA-c8j7-8cv4-2xmq","https://nvd.nist.gov/vuln/detail/CVE-2026-59922","https://github.com/lepture/mistune/commit/96d0f57f8fe9eeb06bb4cff521962a27d7c402e7","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/pypa/advisory-database/tree/main/vulns/mistune/PYSEC-2026-2210.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c8j7-8cv4-2xmq","description":"Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)"},"relatedVulnerabilities":[{"id":"CVE-2026-59922","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59922","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59922","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59922","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-59922","date":"2026-10-27","epss":0.00644,"percentile":0.5066}],"urls":["https://github.com/lepture/mistune/commit/96d0f57f8fe9eeb06bb4cff521962a27d7c402e7","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/lepture/mistune/security/advisories/GHSA-c8j7-8cv4-2xmq"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59922","description":"Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character causes quadratic work in src/mistune/plugins/formatting.py when the strikethrough, mark, or insert plugin scans for matching markers from each possible start position, allowing denial of service through CPU exhaustion. This issue is fixed in version 3.3.0."}]},{"artifact":{"id":"45f87362b5437c73","cpes":["cpe:2.3:a:hsiaoming_yang_\\<me_project:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:mistune:3.0.1:*:*:*:*:*:*:*"],"name":"mistune","purl":"pkg:pypi/mistune@3.0.1","type":"python","version":"3.0.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.3.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4j32-57v6-6g45","versionConstraint":"<3.3.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mistune","version":"3.0.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-4j32-57v6-6g45","fix":{"state":"fixed","versions":["3.3.0"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"3.3.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59925","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59925","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59925","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-59925","date":"2026-10-27","epss":0.00644,"percentile":0.50658}],"risk":0.483,"urls":["https://github.com/lepture/mistune/security/advisories/GHSA-4j32-57v6-6g45","https://nvd.nist.gov/vuln/detail/CVE-2026-59925","https://github.com/lepture/mistune/commit/5de41fb8e527004dbc363e047a3c380c9288c74f","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/pypa/advisory-database/tree/main/vulns/mistune/PYSEC-2026-2213.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4j32-57v6-6g45","description":"Mistune inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs"},"relatedVulnerabilities":[{"id":"CVE-2026-59925","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59925","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59925","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59925","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-59925","date":"2026-10-27","epss":0.00644,"percentile":0.50658}],"urls":["https://github.com/lepture/mistune/commit/5de41fb8e527004dbc363e047a3c380c9288c74f","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/lepture/mistune/security/advisories/GHSA-4j32-57v6-6g45"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59925","description":"Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-asterisk or triple-asterisk emphasis pairs around a character cause quadratic work in src/mistune/inline_parser.py because the parser scans forward for matching close markers from every potential opening run, allowing denial of service in default Mistune parsing. This issue is fixed in version 3.3.0."}]},{"artifact":{"id":"95295f44031221db","cpes":["cpe:2.3:a:isaac_muse_\\<isaac_muse_project:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse_project:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_museproject:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_museproject:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse_project:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac-muse-\\<isaac-muse:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac-muse-\\<isaac-muse:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_museproject:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python-soupsieve:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python-soupsieve:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python_soupsieve:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python_soupsieve:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac-muse-\\<isaac-muse:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python-soupsieve:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python_soupsieve:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:soupsieve:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:soupsieve:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:soupsieve:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python:soupsieve:2.5:*:*:*:*:*:*:*"],"name":"soupsieve","purl":"pkg:pypi/soupsieve@2.5","type":"python","version":"2.5","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.8.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2wc2-fm75-p42x","versionConstraint":"<=2.8.3 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"soupsieve","version":"2.5"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-2wc2-fm75-p42x","fix":{"state":"fixed","versions":["2.8.4"],"available":[{"date":"2026-07-09","kind":"first-observed","version":"2.8.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49476","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-49476","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49476","date":"2026-10-27","epss":0.00644,"percentile":0.50658}],"risk":0.483,"urls":["https://github.com/facelessuser/soupsieve/security/advisories/GHSA-2wc2-fm75-p42x"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2wc2-fm75-p42x","description":"Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists"},"relatedVulnerabilities":[{"id":"CVE-2026-49476","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49476","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-49476","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49476","date":"2026-10-27","epss":0.00644,"percentile":0.50658}],"urls":["https://github.com/facelessuser/soupsieve/commit/28108ab805818c832d9568142a99844fd95a0d39","https://github.com/facelessuser/soupsieve/releases/tag/2.8.4","https://github.com/facelessuser/soupsieve/security/advisories/GHSA-2wc2-fm75-p42x"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49476","description":"Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker who can supply a crafted selector string to soupsieve.compile() or Beautiful Soup .select() / .select_one() to allocate hundreds of megabytes of heap memory from a relatively small input and cause denial of service. This issue is fixed in version 2.8.4."}]},{"artifact":{"id":"95295f44031221db","cpes":["cpe:2.3:a:isaac_muse_\\<isaac_muse_project:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse_project:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_museproject:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_museproject:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse_project:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac-muse-\\<isaac-muse:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac-muse-\\<isaac-muse:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_museproject:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python-soupsieve:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python-soupsieve:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python_soupsieve:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python_soupsieve:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac-muse-\\<isaac-muse:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python-soupsieve:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python_soupsieve:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:soupsieve:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:soupsieve:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:soupsieve:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python:soupsieve:2.5:*:*:*:*:*:*:*"],"name":"soupsieve","purl":"pkg:pypi/soupsieve@2.5","type":"python","version":"2.5","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.8.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-836r-79rf-4m37","versionConstraint":"<=2.8.3 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"soupsieve","version":"2.5"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-836r-79rf-4m37","fix":{"state":"fixed","versions":["2.8.4"],"available":[{"date":"2026-07-09","kind":"first-observed","version":"2.8.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49477","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-49477","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49477","date":"2026-10-27","epss":0.00644,"percentile":0.50658}],"risk":0.483,"urls":["https://github.com/facelessuser/soupsieve/security/advisories/GHSA-836r-79rf-4m37"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-836r-79rf-4m37","description":"Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser"},"relatedVulnerabilities":[{"id":"CVE-2026-49477","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49477","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-49477","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49477","date":"2026-10-27","epss":0.00644,"percentile":0.50658}],"urls":["https://github.com/facelessuser/soupsieve/commit/eb4397618709186c109400448c6043b728217dc3","https://github.com/facelessuser/soupsieve/releases/tag/2.8.4","https://github.com/facelessuser/soupsieve/security/advisories/GHSA-836r-79rf-4m37"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49477","description":"Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value in soupsieve/css_parser.py, allowing an attacker who can supply untrusted CSS selector strings to soupsieve.compile() or Beautiful Soup .select() / .select_one() to cause CPU exhaustion and denial of service. This issue is fixed in version 2.8.4."}]},{"artifact":{"id":"4192b772fea9db3e","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.17"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mh99-v99m-4gvg","versionConstraint":"<1.1.17 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-mh99-v99m-4gvg","fix":{"state":"fixed","versions":["1.1.17"],"available":[{"date":"2026-08-01","kind":"first-observed","version":"1.1.17"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14257","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-14257","cwe":"CWE-770","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-14257","date":"2026-10-27","epss":0.00643,"percentile":0.50602}],"risk":0.48225000000000007,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg","https://nvd.nist.gov/vuln/detail/CVE-2026-14257","https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5","https://github.com/juliangruber/brace-expansion","https://www.npmjs.com/package/brace-expansion","https://github.com/juliangruber/brace-expansion/pull/129","https://github.com/juliangruber/brace-expansion/pull/130","https://github.com/juliangruber/brace-expansion/pull/136","https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","description":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash"},"relatedVulnerabilities":[{"id":"CVE-2026-14257","cvss":[{"type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14257","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-14257","cwe":"CWE-770","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-14257","date":"2026-10-27","epss":0.00643,"percentile":0.50602}],"urls":["https://github.com/juliangruber/brace-expansion","https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5","https://www.npmjs.com/package/brace-expansion"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-14257","description":"brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input ('{a,b}'.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays."}]},{"artifact":{"id":"77066e7e6d2a4d57","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.17"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mh99-v99m-4gvg","versionConstraint":"<1.1.17 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-mh99-v99m-4gvg","fix":{"state":"fixed","versions":["1.1.17"],"available":[{"date":"2026-08-01","kind":"first-observed","version":"1.1.17"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14257","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-14257","cwe":"CWE-770","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-14257","date":"2026-10-27","epss":0.00643,"percentile":0.50602}],"risk":0.48225000000000007,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg","https://nvd.nist.gov/vuln/detail/CVE-2026-14257","https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5","https://github.com/juliangruber/brace-expansion","https://www.npmjs.com/package/brace-expansion","https://github.com/juliangruber/brace-expansion/pull/129","https://github.com/juliangruber/brace-expansion/pull/130","https://github.com/juliangruber/brace-expansion/pull/136","https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","description":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash"},"relatedVulnerabilities":[{"id":"CVE-2026-14257","cvss":[{"type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14257","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-14257","cwe":"CWE-770","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-14257","date":"2026-10-27","epss":0.00643,"percentile":0.50602}],"urls":["https://github.com/juliangruber/brace-expansion","https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5","https://www.npmjs.com/package/brace-expansion"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-14257","description":"brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input ('{a,b}'.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays."}]},{"artifact":{"id":"b08ada23090bcd4d","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mh99-v99m-4gvg","versionConstraint":">=2.0.0,<2.1.3 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-mh99-v99m-4gvg","fix":{"state":"fixed","versions":["2.1.3"],"available":[{"date":"2026-08-01","kind":"first-observed","version":"2.1.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14257","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-14257","cwe":"CWE-770","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-14257","date":"2026-10-27","epss":0.00643,"percentile":0.50602}],"risk":0.48225000000000007,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg","https://nvd.nist.gov/vuln/detail/CVE-2026-14257","https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5","https://github.com/juliangruber/brace-expansion","https://www.npmjs.com/package/brace-expansion","https://github.com/juliangruber/brace-expansion/pull/129","https://github.com/juliangruber/brace-expansion/pull/130","https://github.com/juliangruber/brace-expansion/pull/136","https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","description":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash"},"relatedVulnerabilities":[{"id":"CVE-2026-14257","cvss":[{"type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14257","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-14257","cwe":"CWE-770","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-14257","date":"2026-10-27","epss":0.00643,"percentile":0.50602}],"urls":["https://github.com/juliangruber/brace-expansion","https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5","https://www.npmjs.com/package/brace-expansion"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-14257","description":"brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input ('{a,b}'.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays."}]},{"artifact":{"id":"fa77c1473ae8947b","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mh99-v99m-4gvg","versionConstraint":">=2.0.0,<2.1.3 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-mh99-v99m-4gvg","fix":{"state":"fixed","versions":["2.1.3"],"available":[{"date":"2026-08-01","kind":"first-observed","version":"2.1.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14257","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-14257","cwe":"CWE-770","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-14257","date":"2026-10-27","epss":0.00643,"percentile":0.50602}],"risk":0.48225000000000007,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg","https://nvd.nist.gov/vuln/detail/CVE-2026-14257","https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5","https://github.com/juliangruber/brace-expansion","https://www.npmjs.com/package/brace-expansion","https://github.com/juliangruber/brace-expansion/pull/129","https://github.com/juliangruber/brace-expansion/pull/130","https://github.com/juliangruber/brace-expansion/pull/136","https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d","https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031","https://github.com/juliangruber/brace-expansion/commit/d13ff455a58b0d56704f0111e3c2a0b16ceb06eb"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mh99-v99m-4gvg","description":"brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash"},"relatedVulnerabilities":[{"id":"CVE-2026-14257","cvss":[{"type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14257","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-14257","cwe":"CWE-770","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-14257","date":"2026-10-27","epss":0.00643,"percentile":0.50602}],"urls":["https://github.com/juliangruber/brace-expansion","https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5","https://www.npmjs.com/package/brace-expansion"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-14257","description":"brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input ('{a,b}'.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4806","versionConstraint":"< 2.35-0ubuntu3.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-4806","fix":{"state":"fixed","versions":["2.35-0ubuntu3.5"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.35-0ubuntu3.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-27","epss":0.01606,"percentile":0.75751}],"risk":0.4818,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4806"},"relatedVulnerabilities":[{"id":"CVE-2023-4806","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-27","epss":0.01606,"percentile":0.75751}],"urls":["https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4806","https://bugzilla.redhat.com/show_bug.cgi?id=2237782","http://www.openwall.com/lists/oss-security/2023/10/03/4","http://www.openwall.com/lists/oss-security/2023/10/03/5","http://www.openwall.com/lists/oss-security/2023/10/03/6","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/","https://security.gentoo.org/glsa/202310-03","https://security.netapp.com/advisory/ntap-20240125-0008/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-831302.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4806","description":"A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4806","versionConstraint":"< 2.35-0ubuntu3.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-4806","fix":{"state":"fixed","versions":["2.35-0ubuntu3.5"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.35-0ubuntu3.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-27","epss":0.01606,"percentile":0.75751}],"risk":0.4818,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4806"},"relatedVulnerabilities":[{"id":"CVE-2023-4806","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-27","epss":0.01606,"percentile":0.75751}],"urls":["https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4806","https://bugzilla.redhat.com/show_bug.cgi?id=2237782","http://www.openwall.com/lists/oss-security/2023/10/03/4","http://www.openwall.com/lists/oss-security/2023/10/03/5","http://www.openwall.com/lists/oss-security/2023/10/03/6","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/","https://security.gentoo.org/glsa/202310-03","https://security.netapp.com/advisory/ntap-20240125-0008/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-831302.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4806","description":"A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4806","versionConstraint":"< 2.35-0ubuntu3.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-4806","fix":{"state":"fixed","versions":["2.35-0ubuntu3.5"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.35-0ubuntu3.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-27","epss":0.01606,"percentile":0.75751}],"risk":0.4818,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4806"},"relatedVulnerabilities":[{"id":"CVE-2023-4806","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-27","epss":0.01606,"percentile":0.75751}],"urls":["https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4806","https://bugzilla.redhat.com/show_bug.cgi?id=2237782","http://www.openwall.com/lists/oss-security/2023/10/03/4","http://www.openwall.com/lists/oss-security/2023/10/03/5","http://www.openwall.com/lists/oss-security/2023/10/03/6","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/","https://security.gentoo.org/glsa/202310-03","https://security.netapp.com/advisory/ntap-20240125-0008/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-831302.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4806","description":"A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags."}]},{"artifact":{"id":"45f87362b5437c73","cpes":["cpe:2.3:a:hsiaoming_yang_\\<me_project:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:mistune:3.0.1:*:*:*:*:*:*:*"],"name":"mistune","purl":"pkg:pypi/mistune@3.0.1","type":"python","version":"3.0.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.2.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8mp2-v27r-99xp","versionConstraint":">=3.0.0a1,<=3.2.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mistune","version":"3.0.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-8mp2-v27r-99xp","fix":{"state":"fixed","versions":["3.2.1"],"available":[{"date":"2026-05-07","kind":"first-observed","version":"3.2.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33079","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-33079","cwe":"CWE-1333","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33079","date":"2026-10-27","epss":0.00592,"percentile":0.48072}],"risk":0.47951999999999995,"urls":["https://github.com/lepture/mistune/security/advisories/GHSA-8mp2-v27r-99xp","https://nvd.nist.gov/vuln/detail/CVE-2026-33079","https://github.com/lepture/mistune/blob/df23edd60b43b639d2e6760ef9dd3d618aa11c21/src/mistune/helpers.py#L20-L25"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8mp2-v27r-99xp","description":"Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input"},"relatedVulnerabilities":[{"id":"CVE-2026-33079","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33079","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-33079","cwe":"CWE-1333","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33079","date":"2026-10-27","epss":0.00592,"percentile":0.48072}],"urls":["https://github.com/lepture/mistune/blob/df23edd60b43b639d2e6760ef9dd3d618aa11c21/src/mistune/helpers.py#L20-L25","https://github.com/lepture/mistune/security/advisories/GHSA-8mp2-v27r-99xp","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/security/cve/CVE-2026-33079","https://bugzilla.redhat.com/show_bug.cgi?id=2467298","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33079.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33079","description":"In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdown for parsing to cause denial of service. The regular expression used for parsing link titles contains overlapping alternatives that can trigger catastrophic backtracking. In both the double-quoted and single-quoted branches, a backslash followed by punctuation can be matched either as an escaped punctuation sequence or as two ordinary characters, creating an ambiguous pattern inside a repeated group. If an attacker supplies Markdown containing repeated ! sequences with no closing quote, the regex engine explores an exponential number of backtracking paths. This is reachable through normal Markdown parsing of inline links and block link reference definitions. A small crafted input can therefore cause significant CPU consumption and make applications using Mistune unresponsive."}]},{"artifact":{"id":"680ad1ef8d2de90f","cpes":["cpe:2.3:a:libcmark-gfm-extensions0.29.0.gfm.3:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm-extensions0.29.0.gfm.3:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm_extensions0.29.0.gfm.3:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm_extensions0.29.0.gfm.3:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*"],"name":"libcmark-gfm-extensions0.29.0.gfm.3","purl":"pkg:deb/ubuntu/libcmark-gfm-extensions0.29.0.gfm.3@0.29.0.gfm.3-3?arch=amd64&distro=ubuntu-22.04&upstream=cmark-gfm","type":"deb","version":"0.29.0.gfm.3-3","language":"","licenses":["Apache","BSD-2-clause","CC-BY-SA-4.0","Expat","Unicode"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcmark-gfm-extensions0.29.0.gfm.3/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/libcmark-gfm-extensions0.29.0.gfm.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcmark-gfm-extensions0.29.0.gfm.3:amd64.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/libcmark-gfm-extensions0.29.0.gfm.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cmark-gfm"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-22484","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"cmark-gfm","version":"0.29.0.gfm.3-3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-22484","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-22484","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22484","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22484","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22484","date":"2026-10-27","epss":0.00956,"percentile":0.61246}],"risk":0.47800000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-22484"},"relatedVulnerabilities":[{"id":"CVE-2023-22484","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.5,"impactScore":1.5,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-22484","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22484","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22484","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22484","date":"2026-10-27","epss":0.00956,"percentile":0.61246}],"urls":["https://github.com/github/cmark-gfm/security/advisories/GHSA-24f7-9frr-5h2r"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-22484","description":"cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to a polynomial time complexity issue in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7."}]},{"artifact":{"id":"15a5ed723d6f6533","cpes":["cpe:2.3:a:libcmark-gfm0.29.0.gfm.3:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm0.29.0.gfm.3:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm0.29.0.gfm.3:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm0.29.0.gfm.3:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*"],"name":"libcmark-gfm0.29.0.gfm.3","purl":"pkg:deb/ubuntu/libcmark-gfm0.29.0.gfm.3@0.29.0.gfm.3-3?arch=amd64&distro=ubuntu-22.04&upstream=cmark-gfm","type":"deb","version":"0.29.0.gfm.3-3","language":"","licenses":["Apache","BSD-2-clause","CC-BY-SA-4.0","Expat","Unicode"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcmark-gfm0.29.0.gfm.3/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/libcmark-gfm0.29.0.gfm.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcmark-gfm0.29.0.gfm.3:amd64.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/libcmark-gfm0.29.0.gfm.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cmark-gfm"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-22484","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"cmark-gfm","version":"0.29.0.gfm.3-3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-22484","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-22484","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22484","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22484","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22484","date":"2026-10-27","epss":0.00956,"percentile":0.61246}],"risk":0.47800000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-22484"},"relatedVulnerabilities":[{"id":"CVE-2023-22484","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.5,"impactScore":1.5,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-22484","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22484","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22484","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22484","date":"2026-10-27","epss":0.00956,"percentile":0.61246}],"urls":["https://github.com/github/cmark-gfm/security/advisories/GHSA-24f7-9frr-5h2r"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-22484","description":"cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to a polynomial time complexity issue in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denial of service. This vulnerability has been patched in 0.29.0.gfm.7."}]},{"artifact":{"id":"4bd0adec6e7440e1","cpes":["cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:node.js:*:*","cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:rust:*:*","cpe:2.3:a:isaacs:tar:6.1.15:*:*:*:*:node.js:*:*"],"name":"tar","purl":"pkg:npm/tar@6.1.15","type":"npm","version":"6.1.15","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-34x7-hfp2-rc4v","versionConstraint":"<7.5.7 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"tar","version":"6.1.15"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-34x7-hfp2-rc4v","fix":{"state":"fixed","versions":["7.5.7"],"available":[{"date":"2026-01-29","kind":"first-observed","version":"7.5.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","metrics":{"baseScore":8.2,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-24842","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-24842","cwe":"CWE-59","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-24842","cwe":"CWE-59","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-24842","date":"2026-10-27","epss":0.00608,"percentile":0.48878}],"risk":0.47728,"urls":["https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v","https://nvd.nist.gov/vuln/detail/CVE-2026-24842","https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-34x7-hfp2-rc4v","description":"node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal"},"relatedVulnerabilities":[{"id":"CVE-2026-24842","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","metrics":{"baseScore":8.2,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","metrics":{"baseScore":8.2,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-24842","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-24842","cwe":"CWE-59","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-24842","cwe":"CWE-59","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-24842","date":"2026-10-27","epss":0.00608,"percentile":0.48878}],"urls":["https://github.com/isaacs/node-tar/commit/f4a7aa9bc3d717c987fdf1480ff7a64e87ffdb46","https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v","https://access.redhat.com/errata/RHSA-2026:18480","https://access.redhat.com/errata/RHSA-2026:18868","https://access.redhat.com/errata/RHSA-2026:2900","https://access.redhat.com/errata/RHSA-2026:33371","https://access.redhat.com/errata/RHSA-2026:5447","https://access.redhat.com/errata/RHSA-2026:6192","https://access.redhat.com/security/cve/CVE-2026-24842","https://bugzilla.redhat.com/show_bug.cgi?id=2433645","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24842.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-24842","description":"node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic. This mismatch allows an attacker to craft a malicious TAR archive that bypasses path traversal protections and creates hardlinks to arbitrary files outside the extraction directory. Version 7.5.7 contains a fix for the issue."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-19445","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-19445","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.8","3.15.0rc3"],"available":[{"date":"2026-10-08","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-08","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-08","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-08","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-08","kind":"first-observed","version":"3.14.8"},{"date":"2026-10-08","kind":"first-observed","version":"3.15.0rc3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-10-27","epss":0.00524,"percentile":0.44292}],"risk":0.47683999999999993,"urls":["https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d","https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b","https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7","https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8","https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698","https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c","https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b","https://github.com/python/cpython/issues/156293","https://github.com/python/cpython/pull/158504","https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/","http://www.openwall.com/lists/oss-security/2026/09/30/17"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19445","description":"A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected."},"relatedVulnerabilities":[]},{"artifact":{"id":"c76e629c8d688bb1","cpes":["cpe:2.3:a:libzstd1:libzstd1:1.4.8\\+dfsg-3build1:*:*:*:*:*:*:*"],"name":"libzstd1","purl":"pkg:deb/ubuntu/libzstd1@1.4.8%2Bdfsg-3build1?arch=amd64&distro=ubuntu-22.04&upstream=libzstd","type":"deb","version":"1.4.8+dfsg-3build1","language":"","licenses":["BSD-3-clause","Expat","GPL-2","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libzstd1/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libzstd1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libzstd1:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libzstd1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libzstd"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-4899","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"libzstd","version":"1.4.8+dfsg-3build1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2022-4899","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-4899","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-4899","cwe":"CWE-400","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-4899","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-4899","date":"2026-10-27","epss":0.01588,"percentile":0.75497}],"risk":0.47639999999999993,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-4899"},"relatedVulnerabilities":[{"id":"CVE-2022-4899","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-4899","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-4899","cwe":"CWE-400","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-4899","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-4899","date":"2026-10-27","epss":0.01588,"percentile":0.75497}],"urls":["https://github.com/facebook/zstd/issues/3200","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/","https://security.netapp.com/advisory/ntap-20230725-0005/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-4899","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun."}]},{"artifact":{"id":"821e33cc14bc8e1c","cpes":["cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*"],"name":"minimatch","purl":"pkg:npm/minimatch@3.1.2","type":"npm","version":"3.1.2","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/minimatch/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/minimatch/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3ppc-4f35-3m26","versionConstraint":"<3.1.3 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"minimatch","version":"3.1.2"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-3ppc-4f35-3m26","fix":{"state":"fixed","versions":["3.1.3"],"available":[{"date":"2026-03-04","kind":"first-observed","version":"3.1.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26996","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-26996","date":"2026-10-27","epss":0.00577,"percentile":0.47365}],"risk":0.46736999999999995,"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26","https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5","https://nvd.nist.gov/vuln/detail/CVE-2026-26996"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3ppc-4f35-3m26","description":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern"},"relatedVulnerabilities":[{"id":"CVE-2026-26996","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26996","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-26996","date":"2026-10-27","epss":0.00577,"percentile":0.47365}],"urls":["https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5","https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-26996","description":"minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1."}]},{"artifact":{"id":"28c55cdb8d9bc5f3","cpes":["cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*"],"name":"minimatch","purl":"pkg:npm/minimatch@3.1.2","type":"npm","version":"3.1.2","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/minimatch/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/minimatch/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3ppc-4f35-3m26","versionConstraint":"<3.1.3 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"minimatch","version":"3.1.2"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-3ppc-4f35-3m26","fix":{"state":"fixed","versions":["3.1.3"],"available":[{"date":"2026-03-04","kind":"first-observed","version":"3.1.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26996","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-26996","date":"2026-10-27","epss":0.00577,"percentile":0.47365}],"risk":0.46736999999999995,"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26","https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5","https://nvd.nist.gov/vuln/detail/CVE-2026-26996"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3ppc-4f35-3m26","description":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern"},"relatedVulnerabilities":[{"id":"CVE-2026-26996","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26996","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-26996","date":"2026-10-27","epss":0.00577,"percentile":0.47365}],"urls":["https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5","https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-26996","description":"minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1."}]},{"artifact":{"id":"6d9cf54a34486dd6","cpes":["cpe:2.3:a:minimatch_project:minimatch:9.0.3:*:*:*:*:node.js:*:*"],"name":"minimatch","purl":"pkg:npm/minimatch@9.0.3","type":"npm","version":"9.0.3","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/minimatch/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/minimatch/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"9.0.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3ppc-4f35-3m26","versionConstraint":">=9.0.0,<9.0.6 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"minimatch","version":"9.0.3"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-3ppc-4f35-3m26","fix":{"state":"fixed","versions":["9.0.6"],"available":[{"date":"2026-03-04","kind":"first-observed","version":"9.0.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26996","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-26996","date":"2026-10-27","epss":0.00577,"percentile":0.47365}],"risk":0.46736999999999995,"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26","https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5","https://nvd.nist.gov/vuln/detail/CVE-2026-26996"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3ppc-4f35-3m26","description":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern"},"relatedVulnerabilities":[{"id":"CVE-2026-26996","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26996","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-26996","date":"2026-10-27","epss":0.00577,"percentile":0.47365}],"urls":["https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5","https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-26996","description":"minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1."}]},{"artifact":{"id":"ae6d5e215786aa99","cpes":["cpe:2.3:a:minimatch_project:minimatch:9.0.3:*:*:*:*:node.js:*:*"],"name":"minimatch","purl":"pkg:npm/minimatch@9.0.3","type":"npm","version":"9.0.3","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/minimatch/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/minimatch/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"9.0.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3ppc-4f35-3m26","versionConstraint":">=9.0.0,<9.0.6 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"minimatch","version":"9.0.3"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-3ppc-4f35-3m26","fix":{"state":"fixed","versions":["9.0.6"],"available":[{"date":"2026-03-04","kind":"first-observed","version":"9.0.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26996","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-26996","date":"2026-10-27","epss":0.00577,"percentile":0.47365}],"risk":0.46736999999999995,"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26","https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5","https://nvd.nist.gov/vuln/detail/CVE-2026-26996"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3ppc-4f35-3m26","description":"minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern"},"relatedVulnerabilities":[{"id":"CVE-2026-26996","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26996","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-26996","date":"2026-10-27","epss":0.00577,"percentile":0.47365}],"urls":["https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5","https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-26996","description":"minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains many consecutive * wildcards followed by a literal character that doesn't appear in the test string. Each * compiles to a separate [^/]*? regex group, and when the match fails, V8's regex engine backtracks exponentially across all possible splits. The time complexity is O(4^N) where N is the number of * characters. With N=15, a single minimatch() call takes ~2 seconds. With N=34, it hangs effectively forever. Any application that passes user-controlled strings to minimatch() as the pattern argument is vulnerable to DoS. This issue has been fixed in version 10.2.1."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6100","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6100","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6100","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.5rc1","3.15.0b1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b1"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.13.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-07-02","kind":"first-observed","version":"3.15.0b1"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6100","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-6100","cwe":"CWE-787","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-6100","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-6100","date":"2026-10-27","epss":0.00579,"percentile":0.4745}],"risk":0.466095,"urls":["https://github.com/python/cpython/commit/47128e64f98c3a20271138a98c2922bea2a3ee0e","https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d","https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2","https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20","https://github.com/python/cpython/commit/e20c6c9667c99ecaab96e1a2b3767082841ffc8b","https://github.com/python/cpython/commit/ea8d735eb084cf8cc021df1a30e90d10a8f052e3","https://github.com/python/cpython/issues/148395","https://github.com/python/cpython/pull/148396","https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/","http://www.openwall.com/lists/oss-security/2026/04/13/10","https://access.redhat.com/errata/RHSA-2026:10117","https://access.redhat.com/errata/RHSA-2026:10140","https://access.redhat.com/errata/RHSA-2026:10141","https://access.redhat.com/errata/RHSA-2026:10711","https://access.redhat.com/errata/RHSA-2026:10745","https://access.redhat.com/errata/RHSA-2026:10774","https://access.redhat.com/errata/RHSA-2026:10949","https://access.redhat.com/errata/RHSA-2026:10950","https://access.redhat.com/errata/RHSA-2026:11062","https://access.redhat.com/errata/RHSA-2026:11077","https://access.redhat.com/errata/RHSA-2026:11768","https://access.redhat.com/errata/RHSA-2026:13692","https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:14652","https://access.redhat.com/errata/RHSA-2026:14653","https://access.redhat.com/errata/RHSA-2026:14656","https://access.redhat.com/errata/RHSA-2026:16699","https://access.redhat.com/errata/RHSA-2026:17525","https://access.redhat.com/errata/RHSA-2026:17619","https://access.redhat.com/errata/RHSA-2026:19019","https://access.redhat.com/errata/RHSA-2026:19064","https://access.redhat.com/errata/RHSA-2026:19175","https://access.redhat.com/errata/RHSA-2026:19176","https://access.redhat.com/errata/RHSA-2026:19177","https://access.redhat.com/errata/RHSA-2026:19216","https://access.redhat.com/errata/RHSA-2026:19549","https://access.redhat.com/errata/RHSA-2026:19570","https://access.redhat.com/errata/RHSA-2026:19571","https://access.redhat.com/errata/RHSA-2026:19576","https://access.redhat.com/errata/RHSA-2026:19590","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:21682","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:26187","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:52400","https://access.redhat.com/errata/RHSA-2026:8822","https://access.redhat.com/errata/RHSA-2026:8824","https://access.redhat.com/errata/RHSA-2026:9228","https://access.redhat.com/security/cve/CVE-2026-6100","https://bugzilla.redhat.com/show_bug.cgi?id=2457932","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6100.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6100","description":"Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.\n\nThe vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable."},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.13.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-12781","versionConstraint":"< 3.13.10||>= 3.14.0, < 3.14.1||>= 3.15.0a1, < 3.15.0a2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.13.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-12781","versionConstraint":"< 3.13.10||>= 3.14.0, < 3.14.1||>= 3.15.0a1, < 3.15.0a2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-12781","fix":{"state":"fixed","versions":["3.13.10","3.14.1","3.15.0a2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.13.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a2"},{"date":"2026-06-18","kind":"first-observed","version":"3.13.10"},{"date":"2026-06-18","kind":"first-observed","version":"3.14.1"},{"date":"2026-06-18","kind":"first-observed","version":"3.15.0a2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-10-27","epss":0.00859,"percentile":0.58279}],"risk":0.46386000000000005,"urls":["https://github.com/python/cpython/commit/13360efd385d1a7d0659beba03787ea3d063ef9b","https://github.com/python/cpython/commit/1be80bec7960f5ccd059e75f3dfbd45fca302947","https://github.com/python/cpython/commit/9060b4abbe475591b6230b23c2afefeff26fcca5","https://github.com/python/cpython/commit/e95e783dff443b68e8179fdb57737025bf02ba76","https://github.com/python/cpython/commit/fd17ee026fa9b67f6288cbafe374a3e479fe03a5","https://github.com/python/cpython/issues/125346","https://github.com/python/cpython/pull/141128","https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-12781","description":"When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \"base64\" module the characters \"+/\" will always be accepted, regardless of the value of \"altchars\" parameter, typically used to establish an \"alternative base64 alphabet\" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \"+/\"). If your application does not use the \"altchars\" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \"+\" or \"/\" outside of altchars."},"relatedVulnerabilities":[]},{"artifact":{"id":"caa129f4dfb84903","cpes":["cpe:2.3:a:armin_ronacher_project:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher_project:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher_project:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:jinja2:3.1.2:*:*:*:*:*:*:*"],"name":"jinja2","purl":"pkg:pypi/jinja2@3.1.2","type":"python","version":"3.1.2","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h5c8-rqwp-cp95","versionConstraint":"<3.1.3 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jinja2","version":"3.1.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-h5c8-rqwp-cp95","fix":{"state":"fixed","versions":["3.1.3"],"available":[{"date":"2024-01-12","kind":"first-observed","version":"3.1.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22195","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22195","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-22195","date":"2026-10-27","epss":0.00892,"percentile":0.59232}],"risk":0.4638400000000001,"urls":["https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95","https://nvd.nist.gov/vuln/detail/CVE-2024-22195","https://github.com/pallets/jinja/commit/716795349a41d4983a9a4771f7d883c96ea17be7","https://github.com/pallets/jinja/releases/tag/3.1.3","https://lists.debian.org/debian-lts-announce/2024/01/msg00010.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5XCWZD464AJJJUBOO7CMPXQ4ROBC6JX2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DELCVUUYX75I5K4Q5WMJG4MUZJA6VAIP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O7YWRBX6JQCWC2XXCTZ55C7DPMGICCN3","https://lists.debian.org/debian-lts-announce/2024/12/msg00009.html"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h5c8-rqwp-cp95","description":"Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter"},"relatedVulnerabilities":[{"id":"CVE-2024-22195","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22195","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22195","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-22195","date":"2026-10-27","epss":0.00892,"percentile":0.59232}],"urls":["https://github.com/pallets/jinja/releases/tag/3.1.3","https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95","https://lists.debian.org/debian-lts-announce/2024/01/msg00010.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5XCWZD464AJJJUBOO7CMPXQ4ROBC6JX2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DELCVUUYX75I5K4Q5WMJG4MUZJA6VAIP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O7YWRBX6JQCWC2XXCTZ55C7DPMGICCN3/","https://lists.debian.org/debian-lts-announce/2024/12/msg00009.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22195","description":"Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). The Jinja `xmlattr` filter can be abused to inject arbitrary HTML attribute keys and values, bypassing the auto escaping mechanism and potentially leading to XSS. It may also be possible to bypass attribute validation checks if they are blacklist-based."}]},{"artifact":{"id":"b45b4832d770f70d","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter_server:2.8.0:*:*:*:*:*:*:*"],"name":"jupyter-server","purl":"pkg:pypi/jupyter-server@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.18.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5789-5fc7-67v3","versionConstraint":"<=2.17.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyter-server","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-5789-5fc7-67v3","fix":{"state":"fixed","versions":["2.18.0"],"available":[{"date":"2026-05-06","kind":"first-observed","version":"2.18.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":7.1,"impactScore":5.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35397","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-35397","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-35397","date":"2026-10-27","epss":0.00622,"percentile":0.49585}],"risk":0.46183499999999994,"urls":["https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-5789-5fc7-67v3","https://nvd.nist.gov/vuln/detail/CVE-2026-35397","https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server/PYSEC-2026-68.yaml","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/security/cve/CVE-2026-35397","https://bugzilla.redhat.com/show_bug.cgi?id=2466858","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35397.json","https://access.redhat.com/errata/RHSA-2026:60520"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5789-5fc7-67v3","description":"Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories"},"relatedVulnerabilities":[{"id":"CVE-2026-35397","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":7.1,"impactScore":5.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35397","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-35397","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-35397","date":"2026-10-27","epss":0.00622,"percentile":0.49585}],"urls":["https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-5789-5fc7-67v3","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/security/cve/CVE-2026-35397","https://bugzilla.redhat.com/show_bug.cgi?id=2466858","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35397.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-35397","description":"Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured root_dir and access sibling directories whose names begin with the same prefix as the root_dir. For example, with a root_dir named \"test\", the API permits access to a sibling directory named \"testtest\" through a crafted request to the /api/contents endpoint using encoded path components. An attacker can read, write, and delete files in affected sibling directories. Multi-tenant deployments using predictable naming schemes are particularly at risk, as a user with a directory named \"user1\" could access directories for user10 through user19 and beyond. A user who can choose a single-character folder name could gain access to a significant number of sibling directories. \n\nVersion 2.18.0 contains a fix. As a workaround, ensure folder names do not share a common prefix with any sibling directory."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.29"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63072","versionConstraint":"< 3.0.2-0ubuntu1.29 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-63072","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.29"],"available":[{"date":"2026-08-25","kind":"advisory","version":"3.0.2-0ubuntu1.29"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-27","epss":0.00916,"percentile":0.60007}],"risk":0.45799999999999996,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-63072"},"relatedVulnerabilities":[{"id":"CVE-2026-63072","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-27","epss":0.00916,"percentile":0.60007}],"urls":["https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756","https://github.com/openssl/openssl/commit/87784ad619af36b8807c2044b3940006fccc1e42","https://github.com/openssl/openssl/commit/9530a5fd1aacaeccdced4478ea2340a480613335","https://github.com/openssl/openssl/commit/9ec2f6d2ae2bcad907cf7ee38584855bafe4979a","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63072","description":"Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\ncan write and cleanse more bytes than that query reports, causing an 8-byte\nout-of-bounds heap write.\n\nImpact summary: An attacker who supplies a crafted CMS message can trigger a\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\nof Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: The key-wrap OID is potentially attacker-controlled on the wire.\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\nAn attacker can take a legitimate message and change a single OID byte to\nselect the padded variant while leaving the message otherwise valid. Since\nthe unwrap key is derived from the recipient's private operation (ECDH key\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\npass, and the decryption fails with integrity failure.\n\nThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\nimmediately past the allocation, requires no special configuration, and is\nreachable from the public CMS_decrypt() function. The consequence is\na heap corruption leading to a Denial of Service. The fix in the CMS code\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot\nwrite past the allocation.\n\nFIPS impact: no\n\nAs the CMS code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.29"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-63072","versionConstraint":"< 3.0.2-0ubuntu1.29 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-63072","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.29"],"available":[{"date":"2026-08-25","kind":"advisory","version":"3.0.2-0ubuntu1.29"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-27","epss":0.00916,"percentile":0.60007}],"risk":0.45799999999999996,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-63072"},"relatedVulnerabilities":[{"id":"CVE-2026-63072","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-27","epss":0.00916,"percentile":0.60007}],"urls":["https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756","https://github.com/openssl/openssl/commit/87784ad619af36b8807c2044b3940006fccc1e42","https://github.com/openssl/openssl/commit/9530a5fd1aacaeccdced4478ea2340a480613335","https://github.com/openssl/openssl/commit/9ec2f6d2ae2bcad907cf7ee38584855bafe4979a","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63072","description":"Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\ncan write and cleanse more bytes than that query reports, causing an 8-byte\nout-of-bounds heap write.\n\nImpact summary: An attacker who supplies a crafted CMS message can trigger a\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\nof Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: The key-wrap OID is potentially attacker-controlled on the wire.\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\nAn attacker can take a legitimate message and change a single OID byte to\nselect the padded variant while leaving the message otherwise valid. Since\nthe unwrap key is derived from the recipient's private operation (ECDH key\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\npass, and the decryption fails with integrity failure.\n\nThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\nimmediately past the allocation, requires no special configuration, and is\nreachable from the public CMS_decrypt() function. The consequence is\na heap corruption leading to a Denial of Service. The fix in the CMS code\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot\nwrite past the allocation.\n\nFIPS impact: no\n\nAs the CMS code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."}]},{"artifact":{"id":"fd33bcffbac145b9","cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:generic/krb5@1.21.2","type":"binary","version":"1.21.2","language":"","licenses":[],"locations":[{"path":"/opt/conda/lib/libkrb5.so.3.3","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libkrb5.so.3.3","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-40355","versionConstraint":">= 1.18.0, <= 1.22.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"package":{"name":"krb5","version":"1.21.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-40355","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-27","epss":0.00645,"percentile":0.50724}],"risk":0.4579499999999999,"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-9287","versionConstraint":"< 3.9.21||>= 3.10.0, < 3.10.16||>= 3.11.0, < 3.11.11||>= 3.12.0, < 3.12.8||>= 3.13.0, < 3.13.1||>= 3.14.0a1, < 3.14.0a2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-9287","versionConstraint":"< 3.9.21||>= 3.10.0, < 3.10.16||>= 3.11.0, < 3.11.11||>= 3.12.0, < 3.12.8||>= 3.13.0, < 3.13.1||>= 3.14.0a1, < 3.14.0a2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-9287","fix":{"state":"fixed","versions":["3.9.21","3.10.16","3.11.11","3.12.8","3.13.1","3.14.0a2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.8"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.1"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0a2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.21"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.16"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.8"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.1"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0a2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9287","cwe":"CWE-428","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2024-9287","cwe":"CWE-77","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-9287","date":"2026-10-27","epss":0.00648,"percentile":0.50843}],"risk":0.45522,"urls":["https://github.com/python/cpython/commit/633555735a023d3e4d92ba31da35b1205f9ecbd7","https://github.com/python/cpython/commit/8450b2482586857d689b6658f08de9c8179af7db","https://github.com/python/cpython/commit/9286ab3a107ea41bd3f3c3682ce2512692bdded8","https://github.com/python/cpython/commit/ae961ae94bf19c8f8c7fbea3d1c25cc55ce8ae97","https://github.com/python/cpython/commit/d48cc82ed25e26b02eb97c6263d95dcaa1e9111b","https://github.com/python/cpython/commit/e52095a0c1005a87eed2276af7a1f2f66e2b6483","https://github.com/python/cpython/issues/124651","https://github.com/python/cpython/pull/124712","https://mail.python.org/archives/list/security-announce@python.org/thread/RSPJ2B5JL22FG3TKUJ7D7DQ4N5JRRBZL/","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20250425-0006/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9287","description":"A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment \"activation\" scripts (ie \"source venv/bin/activate\"). This means that attacker-controlled virtual environments are able to run commands when the virtual environment is activated. Virtual environments which are not created by an attacker or which aren't activated before being used (ie \"./venv/bin/python\") are not affected."},"relatedVulnerabilities":[]},{"artifact":{"id":"b96ada19cdd5e352","cpes":["cpe:2.3:a:jupyter_development_team_project:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_project:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_teamproject:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_teamproject:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_project:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_teamproject:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterhub:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterhub:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterhub:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterhub:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_project:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_project:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterproject:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterproject:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterhub:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterhub:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterhub:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterhub:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_project:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterproject:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterhub:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyterhub:4.0.2:*:*:*:*:*:*:*"],"name":"jupyterhub","purl":"pkg:pypi/jupyterhub@4.0.2","type":"python","version":"4.0.2","language":"python","licenses":["BSD"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.1.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9x4q-3gxw-849f","versionConstraint":"<4.1.6 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyterhub","version":"4.0.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-9x4q-3gxw-849f","fix":{"state":"fixed","versions":["4.1.6"],"available":[{"date":"2024-08-09","kind":"first-observed","version":"4.1.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-41942","cwe":"CWE-274","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-41942","date":"2026-10-27","epss":0.0059,"percentile":0.48003}],"risk":0.45430000000000004,"urls":["https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-9x4q-3gxw-849f","https://github.com/jupyterhub/jupyterhub/commit/99e2720b0fc626cbeeca3c6337f917fdacfaa428","https://github.com/jupyterhub/jupyterhub/commit/ff2db557a85b6980f90c3158634bf924063ab8ba","https://nvd.nist.gov/vuln/detail/CVE-2024-41942","https://github.com/pypa/advisory-database/tree/main/vulns/jupyterhub/PYSEC-2024-200.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9x4q-3gxw-849f","description":"JupyterHub has a privilege escalation vulnerability with the `admin:users` scope"},"relatedVulnerabilities":[{"id":"CVE-2024-41942","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-41942","cwe":"CWE-274","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-41942","date":"2026-10-27","epss":0.0059,"percentile":0.48003}],"urls":["https://github.com/jupyterhub/jupyterhub/commit/99e2720b0fc626cbeeca3c6337f917fdacfaa428","https://github.com/jupyterhub/jupyterhub/commit/ff2db557a85b6980f90c3158634bf924063ab8ba","https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-9x4q-3gxw-849f"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-41942","description":"JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is granted the `admin:users` scope, they may escalate their own privileges by making themselves a full admin user. The impact is relatively small in that `admin:users` is already an extremely privileged scope only granted to trusted users.\nIn effect, `admin:users` is equivalent to `admin=True`, which is not intended. Note that the change here only prevents escalation to the built-in JupyterHub admin role that has unrestricted permissions. It does not prevent users with e.g. `groups` permissions from granting themselves or other users permissions via group membership, which is intentional. Versions 4.1.6 and 5.1.0 fix this issue."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-32990","versionConstraint":"< 3.7.3-4ubuntu1.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-32990","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.7"],"available":[{"date":"2025-07-14","kind":"advisory","version":"3.7.3-4ubuntu1.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-32990","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32990","date":"2026-10-27","epss":0.00896,"percentile":0.5936}],"risk":0.44799999999999995,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-32990"},"relatedVulnerabilities":[{"id":"CVE-2025-32990","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32990","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32990","date":"2026-10-27","epss":0.00896,"percentile":0.5936}],"urls":["https://access.redhat.com/errata/RHSA-2025:16115","https://access.redhat.com/errata/RHSA-2025:16116","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:17348","https://access.redhat.com/errata/RHSA-2025:17361","https://access.redhat.com/errata/RHSA-2025:17415","https://access.redhat.com/errata/RHSA-2025:19088","https://access.redhat.com/errata/RHSA-2025:22529","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/security/cve/CVE-2025-32990","https://bugzilla.redhat.com/show_bug.cgi?id=2359620","https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html","http://www.openwall.com/lists/oss-security/2025/07/11/3","https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-32990","description":"A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system."}]},{"artifact":{"id":"62c901759cbb6bb3","cpes":["cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.1.1:*:*:*:*:node.js:*:*"],"name":"http-cache-semantics","purl":"pkg:npm/http-cache-semantics@4.1.1","type":"npm","version":"4.1.1","language":"javascript","licenses":["BSD-2-Clause"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/http-cache-semantics/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/http-cache-semantics/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-ch52-4w7c-c8xp","versionConstraint":"<=4.2.0 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"http-cache-semantics","version":"4.1.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-ch52-4w7c-c8xp","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93748","cwe":"CWE-524","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-93748","date":"2026-10-27","epss":0.00569,"percentile":0.46947}],"risk":0.44382,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-93748","https://github.com/kornelski/http-cache-semantics/issues/56","https://github.com/kornelski/http-cache-semantics/blob/f01112e954b83cfa8765b633ba880e5e980aa54c/index.js#L425-L441","https://github.com/kornelski/http-cache-semantics/blob/f01112e954b83cfa8765b633ba880e5e980aa54c/index.js#L603-L623","https://www.vulncheck.com/advisories/http-cache-semantics-through-4.2.0-cross-user-cache-disclosure-via-max-stale"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-ch52-4w7c-c8xp","description":"http-cache-semantics max-stale handling can disclose cross-user cached responses"},"relatedVulnerabilities":[{"id":"CVE-2026-93748","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93748","cwe":"CWE-524","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-93748","date":"2026-10-27","epss":0.00569,"percentile":0.46947}],"urls":["https://github.com/kornelski/http-cache-semantics","https://github.com/kornelski/http-cache-semantics/blob/f01112e954b83cfa8765b633ba880e5e980aa54c/index.js#L425-L441","https://github.com/kornelski/http-cache-semantics/blob/f01112e954b83cfa8765b633ba880e5e980aa54c/index.js#L603-L623","https://github.com/kornelski/http-cache-semantics/issues/56","https://www.vulncheck.com/advisories/http-cache-semantics-through-4.2.0-cross-user-cache-disclosure-via-max-stale","https://github.com/kornelski/http-cache-semantics/issues/56#issuecomment-5975759591"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93748","description":"http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to obtain another user's Set-Cookie session credentials from shared-cache entries that were deliberately zeroed for security reasons."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4435","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4435","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4435","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4435","cwe":"CWE-682","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-4435","date":"2026-10-27","epss":0.0059,"percentile":0.48018}],"risk":0.4425,"urls":["https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4435","description":"When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped."},"relatedVulnerabilities":[]},{"artifact":{"id":"c212ad19b69d6fc8","cpes":["cpe:2.3:a:follow-redirects:follow_redirects:1.15.2:*:*:*:*:node.js:*:*"],"name":"follow-redirects","purl":"pkg:npm/follow-redirects@1.15.2","type":"npm","version":"1.15.2","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/configurable-http-proxy/node_modules/follow-redirects/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/configurable-http-proxy/node_modules/follow-redirects/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.15.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-jchw-25xp-jwwc","versionConstraint":"<1.15.4 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"follow-redirects","version":"1.15.2"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-jchw-25xp-jwwc","fix":{"state":"fixed","versions":["1.15.4"],"available":[{"date":"2024-01-09","kind":"first-observed","version":"1.15.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-26159","cwe":"CWE-20","type":"Secondary","source":"report@snyk.io"},{"cve":"CVE-2023-26159","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-26159","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-26159","date":"2026-10-27","epss":0.00797,"percentile":0.563}],"risk":0.4423349999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-26159","https://github.com/follow-redirects/follow-redirects/issues/235","https://github.com/follow-redirects/follow-redirects/pull/236","https://security.snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-6141137","https://github.com/follow-redirects/follow-redirects/commit/7a6567e16dfa9ad18a70bfe91784c28653fbf19d","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZ425BFKNBQ6AK7I5SAM56TWON5OF2XM","https://security.netapp.com/advisory/ntap-20241108-0002"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-jchw-25xp-jwwc","description":"Follow Redirects improperly handles URLs in the url.parse() function"},"relatedVulnerabilities":[{"id":"CVE-2023-26159","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"report@snyk.io","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-26159","cwe":"CWE-20","type":"Secondary","source":"report@snyk.io"},{"cve":"CVE-2023-26159","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-26159","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-26159","date":"2026-10-27","epss":0.00797,"percentile":0.563}],"urls":["https://github.com/follow-redirects/follow-redirects/issues/235","https://github.com/follow-redirects/follow-redirects/pull/236","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZZ425BFKNBQ6AK7I5SAM56TWON5OF2XM/","https://security.snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-6141137","https://security.netapp.com/advisory/ntap-20241108-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-26159","description":"Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function. When new URL() throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches."}]},{"artifact":{"id":"28c55cdb8d9bc5f3","cpes":["cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*"],"name":"minimatch","purl":"pkg:npm/minimatch@3.1.2","type":"npm","version":"3.1.2","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/minimatch/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/minimatch/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7r86-cg39-jmmj","versionConstraint":"<3.1.3 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"minimatch","version":"3.1.2"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-7r86-cg39-jmmj","fix":{"state":"fixed","versions":["3.1.3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"3.1.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27903","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27903","date":"2026-10-27","epss":0.00576,"percentile":0.47284}],"risk":0.432,"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj","https://nvd.nist.gov/vuln/detail/CVE-2026-27903","https://github.com/isaacs/minimatch/commit/0bf499aa45f5059b56809cc3b75ff3eafeb8d748"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7r86-cg39-jmmj","description":"minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments"},"relatedVulnerabilities":[{"id":"CVE-2026-27903","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27903","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27903","date":"2026-10-27","epss":0.00576,"percentile":0.47284}],"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-27903","description":"minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne()` performs unbounded recursive backtracking when a glob pattern contains multiple non-adjacent `**` (GLOBSTAR) segments and the input path does not match. The time complexity is O(C(n, k)) -- binomial -- where `n` is the number of path segments and `k` is the number of globstars. With k=11 and n=30, a call to the default `minimatch()` API stalls for roughly 5 seconds. With k=13, it exceeds 15 seconds. No memoization or call budget exists to bound this behavior. Any application where an attacker can influence the glob pattern passed to `minimatch()` is vulnerable. The realistic attack surface includes build tools and task runners that accept user-supplied glob arguments (ESLint, Webpack, Rollup config), multi-tenant systems where one tenant configures glob-based rules that run in a shared process, admin or developer interfaces that accept ignore-rule or filter configuration as globs, and CI/CD pipelines that evaluate user-submitted config files containing glob patterns. An attacker who can place a crafted pattern into any of these paths can stall the Node.js event loop for tens of seconds per invocation. The pattern is 56 bytes for a 5-second stall and does not require authentication in contexts where pattern input is part of the feature. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3 fix the issue."}]},{"artifact":{"id":"821e33cc14bc8e1c","cpes":["cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*"],"name":"minimatch","purl":"pkg:npm/minimatch@3.1.2","type":"npm","version":"3.1.2","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/minimatch/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/minimatch/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7r86-cg39-jmmj","versionConstraint":"<3.1.3 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"minimatch","version":"3.1.2"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-7r86-cg39-jmmj","fix":{"state":"fixed","versions":["3.1.3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"3.1.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27903","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27903","date":"2026-10-27","epss":0.00576,"percentile":0.47284}],"risk":0.432,"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj","https://nvd.nist.gov/vuln/detail/CVE-2026-27903","https://github.com/isaacs/minimatch/commit/0bf499aa45f5059b56809cc3b75ff3eafeb8d748"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7r86-cg39-jmmj","description":"minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments"},"relatedVulnerabilities":[{"id":"CVE-2026-27903","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27903","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27903","date":"2026-10-27","epss":0.00576,"percentile":0.47284}],"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-27903","description":"minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne()` performs unbounded recursive backtracking when a glob pattern contains multiple non-adjacent `**` (GLOBSTAR) segments and the input path does not match. The time complexity is O(C(n, k)) -- binomial -- where `n` is the number of path segments and `k` is the number of globstars. With k=11 and n=30, a call to the default `minimatch()` API stalls for roughly 5 seconds. With k=13, it exceeds 15 seconds. No memoization or call budget exists to bound this behavior. Any application where an attacker can influence the glob pattern passed to `minimatch()` is vulnerable. The realistic attack surface includes build tools and task runners that accept user-supplied glob arguments (ESLint, Webpack, Rollup config), multi-tenant systems where one tenant configures glob-based rules that run in a shared process, admin or developer interfaces that accept ignore-rule or filter configuration as globs, and CI/CD pipelines that evaluate user-submitted config files containing glob patterns. An attacker who can place a crafted pattern into any of these paths can stall the Node.js event loop for tens of seconds per invocation. The pattern is 56 bytes for a 5-second stall and does not require authentication in contexts where pattern input is part of the feature. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3 fix the issue."}]},{"artifact":{"id":"ae6d5e215786aa99","cpes":["cpe:2.3:a:minimatch_project:minimatch:9.0.3:*:*:*:*:node.js:*:*"],"name":"minimatch","purl":"pkg:npm/minimatch@9.0.3","type":"npm","version":"9.0.3","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/minimatch/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/minimatch/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"9.0.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7r86-cg39-jmmj","versionConstraint":">=9.0.0,<9.0.7 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"minimatch","version":"9.0.3"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-7r86-cg39-jmmj","fix":{"state":"fixed","versions":["9.0.7"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"9.0.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27903","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27903","date":"2026-10-27","epss":0.00576,"percentile":0.47284}],"risk":0.432,"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj","https://nvd.nist.gov/vuln/detail/CVE-2026-27903","https://github.com/isaacs/minimatch/commit/0bf499aa45f5059b56809cc3b75ff3eafeb8d748"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7r86-cg39-jmmj","description":"minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments"},"relatedVulnerabilities":[{"id":"CVE-2026-27903","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27903","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27903","date":"2026-10-27","epss":0.00576,"percentile":0.47284}],"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-27903","description":"minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne()` performs unbounded recursive backtracking when a glob pattern contains multiple non-adjacent `**` (GLOBSTAR) segments and the input path does not match. The time complexity is O(C(n, k)) -- binomial -- where `n` is the number of path segments and `k` is the number of globstars. With k=11 and n=30, a call to the default `minimatch()` API stalls for roughly 5 seconds. With k=13, it exceeds 15 seconds. No memoization or call budget exists to bound this behavior. Any application where an attacker can influence the glob pattern passed to `minimatch()` is vulnerable. The realistic attack surface includes build tools and task runners that accept user-supplied glob arguments (ESLint, Webpack, Rollup config), multi-tenant systems where one tenant configures glob-based rules that run in a shared process, admin or developer interfaces that accept ignore-rule or filter configuration as globs, and CI/CD pipelines that evaluate user-submitted config files containing glob patterns. An attacker who can place a crafted pattern into any of these paths can stall the Node.js event loop for tens of seconds per invocation. The pattern is 56 bytes for a 5-second stall and does not require authentication in contexts where pattern input is part of the feature. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3 fix the issue."}]},{"artifact":{"id":"6d9cf54a34486dd6","cpes":["cpe:2.3:a:minimatch_project:minimatch:9.0.3:*:*:*:*:node.js:*:*"],"name":"minimatch","purl":"pkg:npm/minimatch@9.0.3","type":"npm","version":"9.0.3","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/minimatch/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/minimatch/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"9.0.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7r86-cg39-jmmj","versionConstraint":">=9.0.0,<9.0.7 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"minimatch","version":"9.0.3"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-7r86-cg39-jmmj","fix":{"state":"fixed","versions":["9.0.7"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"9.0.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27903","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27903","date":"2026-10-27","epss":0.00576,"percentile":0.47284}],"risk":0.432,"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj","https://nvd.nist.gov/vuln/detail/CVE-2026-27903","https://github.com/isaacs/minimatch/commit/0bf499aa45f5059b56809cc3b75ff3eafeb8d748"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7r86-cg39-jmmj","description":"minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments"},"relatedVulnerabilities":[{"id":"CVE-2026-27903","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27903","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27903","date":"2026-10-27","epss":0.00576,"percentile":0.47284}],"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-7r86-cg39-jmmj"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-27903","description":"minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne()` performs unbounded recursive backtracking when a glob pattern contains multiple non-adjacent `**` (GLOBSTAR) segments and the input path does not match. The time complexity is O(C(n, k)) -- binomial -- where `n` is the number of path segments and `k` is the number of globstars. With k=11 and n=30, a call to the default `minimatch()` API stalls for roughly 5 seconds. With k=13, it exceeds 15 seconds. No memoization or call budget exists to bound this behavior. Any application where an attacker can influence the glob pattern passed to `minimatch()` is vulnerable. The realistic attack surface includes build tools and task runners that accept user-supplied glob arguments (ESLint, Webpack, Rollup config), multi-tenant systems where one tenant configures glob-based rules that run in a shared process, admin or developer interfaces that accept ignore-rule or filter configuration as globs, and CI/CD pipelines that evaluate user-submitted config files containing glob patterns. An attacker who can place a crafted pattern into any of these paths can stall the Node.js event loop for tens of seconds per invocation. The pattern is 56 bytes for a 5-second stall and does not require authentication in contexts where pattern input is part of the feature. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3 fix the issue."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-12084","versionConstraint":"< 3.10.20||>= 3.11.0a1, < 3.11.15||>= 3.12.0a1, < 3.12.13||>= 3.13.0a1, < 3.13.11||>= 3.14.0a1, < 3.14.2||>= 3.15.0a1, < 3.15.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-12084","versionConstraint":"< 3.10.20||>= 3.11.0a1, < 3.11.15||>= 3.12.0a1, < 3.12.13||>= 3.13.0a1, < 3.13.11||>= 3.14.0a1, < 3.14.2||>= 3.15.0a1, < 3.15.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-12084","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.11","3.14.2","3.15.0a3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.2"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a3"},{"date":"2026-05-07","kind":"first-observed","version":"3.10.20"},{"date":"2026-05-07","kind":"first-observed","version":"3.11.15"},{"date":"2026-05-07","kind":"first-observed","version":"3.12.13"},{"date":"2025-12-10","kind":"first-observed","version":"3.13.11"},{"date":"2025-12-10","kind":"first-observed","version":"3.14.2"},{"date":"2026-05-07","kind":"first-observed","version":"3.15.0a3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12084","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12084","date":"2026-10-27","epss":0.00799,"percentile":0.5634}],"risk":0.43146000000000007,"urls":["https://github.com/python/cpython/commit/027f21e417b26eed4505ac2db101a4352b7c51a0","https://github.com/python/cpython/commit/08d8e18ad81cd45bc4a27d6da478b51ea49486e4","https://github.com/python/cpython/commit/27648a1818749ef44c420afe6173af6868715437","https://github.com/python/cpython/commit/41f468786762348960486c166833a218a0a436af","https://github.com/python/cpython/commit/57937a8e5e293f0dcba5115f7b7a11b1e0c9a273","https://github.com/python/cpython/commit/8d2d7bb2e754f8649a68ce4116271a4932f76907","https://github.com/python/cpython/commit/9c9dda6625a2a90d2a06c657eee021d6be19842d","https://github.com/python/cpython/commit/a46c10ec9d4050ab67b8a932e0859a2ea60c3cb8","https://github.com/python/cpython/commit/a696ba8b4d42fd632afc9bc88ad830a2e4cceed8","https://github.com/python/cpython/commit/c97e87593063d84a2bd9fe7068b30eb44de23dc0","https://github.com/python/cpython/commit/ddcd2acd85d891a53e281c773b3093f9db953964","https://github.com/python/cpython/commit/e91c11449cad34bac3ea55ee09ca557691d92b53","https://github.com/python/cpython/issues/142145","https://github.com/python/cpython/pull/142146"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-12084","description":"When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents."},"relatedVulnerabilities":[]},{"artifact":{"id":"9d60751a9fbaf207","cpes":["cpe:2.3:a:python_tornado_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:tornado:6.3.3:*:*:*:*:*:*:*"],"name":"tornado","purl":"pkg:pypi/tornado@6.3.3","type":"python","version":"6.3.3","language":"python","licenses":["Apache-2.0"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"6.5.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mgf9-4vpg-hj56","versionConstraint":"<6.5.6 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"tornado","version":"6.3.3"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-mgf9-4vpg-hj56","fix":{"state":"fixed","versions":["6.5.6"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"6.5.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49855","cwe":"CWE-409","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49855","date":"2026-10-27","epss":0.00572,"percentile":0.47101}],"risk":0.42900000000000005,"urls":["https://github.com/tornadoweb/tornado/security/advisories/GHSA-mgf9-4vpg-hj56"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mgf9-4vpg-hj56","description":"tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)"},"relatedVulnerabilities":[{"id":"CVE-2026-49855","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49855","cwe":"CWE-409","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49855","date":"2026-10-27","epss":0.00572,"percentile":0.47101}],"urls":["https://github.com/tornadoweb/tornado/commit/ff808b33adc52d89a549376a5e3628e92abbc8ff","https://github.com/tornadoweb/tornado/pull/3626","https://github.com/tornadoweb/tornado/security/advisories/GHSA-mgf9-4vpg-hj56"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49855","description":"Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, Tornado gzip decompression routines processed limited-size chunks but did not enforce an overall limit on accumulated decompressed chunks, allowing a malicious server accessed by SimpleAsyncHTTPClient or an HTTPServer configured with decompress_request=True to consume effectively unlimited memory. This issue is fixed in version 6.5.6."}]},{"artifact":{"id":"fd33bcffbac145b9","cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:generic/krb5@1.21.2","type":"binary","version":"1.21.2","language":"","licenses":[],"locations":[{"path":"/opt/conda/lib/libkrb5.so.3.3","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libkrb5.so.3.3","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-40356","versionConstraint":">= 1.18.0, <= 1.22.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"package":{"name":"krb5","version":"1.21.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-40356","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-27","epss":0.00604,"percentile":0.48682}],"risk":0.42884000000000005,"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."},"relatedVulnerabilities":[]},{"artifact":{"id":"fd33bcffbac145b9","cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:generic/krb5@1.21.2","type":"binary","version":"1.21.2","language":"","licenses":[],"locations":[{"path":"/opt/conda/lib/libkrb5.so.3.3","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libkrb5.so.3.3","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-26458","versionConstraint":"= 1.21.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"package":{"name":"krb5","version":"1.21.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-26458","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26458","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-26458","date":"2026-10-27","epss":0.00815,"percentile":0.56864}],"risk":0.41972499999999996,"urls":["https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_1.md","https://security.netapp.com/advisory/ntap-20240415-0010/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26458","description":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"9d60751a9fbaf207","cpes":["cpe:2.3:a:python_tornado_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:tornado:6.3.3:*:*:*:*:*:*:*"],"name":"tornado","purl":"pkg:pypi/tornado@6.3.3","type":"python","version":"6.3.3","language":"python","licenses":["Apache-2.0"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"6.5.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c98p-7wgm-6p64","versionConstraint":"<6.5.3 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"tornado","version":"6.3.3"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-c98p-7wgm-6p64","fix":{"state":"fixed","versions":["6.5.3"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"6.5.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-67725","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-67725","date":"2026-10-27","epss":0.00559,"percentile":0.46366}],"risk":0.41925,"urls":["https://github.com/tornadoweb/tornado/security/advisories/GHSA-c98p-7wgm-6p64","https://nvd.nist.gov/vuln/detail/CVE-2025-67725","https://github.com/tornadoweb/tornado/commit/771472cfdaeebc0d89a9cc46e249f8891a6b29cd","https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2025-266.yaml","https://github.com/tornadoweb/tornado/releases/tag/v6.5.3"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c98p-7wgm-6p64","description":"Tornado: Quadratic DoS via Repeated Header Coalescing"},"relatedVulnerabilities":[{"id":"CVE-2025-67725","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-67725","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-67725","date":"2026-10-27","epss":0.00559,"percentile":0.46366}],"urls":["https://github.com/tornadoweb/tornado/commit/771472cfdaeebc0d89a9cc46e249f8891a6b29cd","https://github.com/tornadoweb/tornado/releases/tag/v6.5.3","https://github.com/tornadoweb/tornado/security/advisories/GHSA-c98p-7wgm-6p64"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-67725","description":"Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-19553","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-19553","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.8","3.15.0rc3"],"available":[{"date":"2026-10-08","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-08","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-08","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-08","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-08","kind":"first-observed","version":"3.14.8"},{"date":"2026-10-08","kind":"first-observed","version":"3.15.0rc3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-10-27","epss":0.00547,"percentile":0.4562}],"risk":0.412985,"urls":["https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96","https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf","https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082","https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed","https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced","https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80","https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062","https://github.com/python/cpython/issues/156793","https://github.com/python/cpython/pull/158503","https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/","http://www.openwall.com/lists/oss-security/2026/09/30/16"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19553","description":"ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied."},"relatedVulnerabilities":[]},{"artifact":{"id":"8d95af5749a39e43","cpes":["cpe:2.3:a:brotli_authors_project:python-brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:brotli_authors_project:python_brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:brotli_authorsproject:python-brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:brotli_authorsproject:python_brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:brotli_authors_project:brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:brotli_authors:python-brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:brotli_authors:python_brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:brotli_authorsproject:brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:python-brotli:python-brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:python-brotli:python_brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:python_brotli:python-brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:python_brotli:python_brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:brotli_authors:brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:brotli:python-brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:brotli:python_brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:python-brotli:brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:python_brotli:brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:brotli:brotli:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:python:brotli:1.1.0:*:*:*:*:*:*:*"],"name":"brotli","purl":"pkg:pypi/brotli@1.1.0","type":"python","version":"1.1.0","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/Brotli-1.1.0.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/Brotli-1.1.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/Brotli-1.1.0.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/Brotli-1.1.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Brotli-1.1.0.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/Brotli-1.1.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Brotli-1.1.0.dist-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/Brotli-1.1.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.2.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2qfp-q593-8484","versionConstraint":"<=1.1.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"brotli","version":"1.1.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-2qfp-q593-8484","fix":{"state":"fixed","versions":["1.2.0"],"available":[{"date":"2025-11-05","kind":"first-observed","version":"1.2.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6176","cwe":"CWE-400","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2025-6176","date":"2026-10-27","epss":0.00545,"percentile":0.45511}],"risk":0.40875,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-6176","https://huntr.com/bounties/2c26a886-5984-47ee-a421-0d5fe1344eb0","https://github.com/google/brotli/pull/1234","https://github.com/google/brotli/commit/67d78bc41db1a0d03f2e763497748f2f69946627","https://github.com/google/brotli/releases/tag/v1.2.0","https://github.com/google/brotli/issues/1375","https://github.com/scrapy/scrapy/pull/7134","https://github.com/google/brotli/issues/1327","https://github.com/scrapy/scrapy/commit/14737e91edc513967f516fc839cc9c8a4f8d91da"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2qfp-q593-8484","description":"Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation"},"relatedVulnerabilities":[{"id":"CVE-2025-6176","cvss":[{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6176","cwe":"CWE-400","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2025-6176","date":"2026-10-27","epss":0.00545,"percentile":0.45511}],"urls":["https://huntr.com/bounties/2c26a886-5984-47ee-a421-0d5fe1344eb0"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-6176","description":"Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompression bombs fails to mitigate the brotli variant, allowing remote servers to crash clients with less than 80GB of available memory. This occurs because brotli can achieve extremely high compression ratios for zero-filled data, leading to excessive memory consumption during decompression."}]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.34.0-3ubuntu1.3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-47038","versionConstraint":"< 5.34.0-3ubuntu1.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-47038","fix":{"state":"fixed","versions":["5.34.0-3ubuntu1.3"],"available":[{"date":"2023-11-27","kind":"advisory","version":"5.34.0-3ubuntu1.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-47038","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-47038","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-47038","date":"2026-10-27","epss":0.00814,"percentile":0.56826}],"risk":0.407,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-47038"},"relatedVulnerabilities":[{"id":"CVE-2023-47038","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-47038","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-47038","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-47038","date":"2026-10-27","epss":0.00814,"percentile":0.56826}],"urls":["https://access.redhat.com/errata/RHSA-2024:2228","https://access.redhat.com/errata/RHSA-2024:3128","https://access.redhat.com/security/cve/CVE-2023-47038","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056746","https://bugzilla.redhat.com/show_bug.cgi?id=2249523","https://github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010","https://github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6","https://github.com/Perl/perl5/commit/ff1f9f59360afeebd6f75ca1502f5c3ebf077da3","https://github.com/aquasecurity/trivy/discussions/8400","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNEEWAACXQCEEAKSG7XX2D5YDRWLCIZJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UMDZZ4SCEW6FRWZDMXGAKZ35THTAWFG6/","https://perldoc.perl.org/perl5382delta#CVE-2023-47038-Write-past-buffer-end-via-illegal-user-defined-Unicode-property","https://ubuntu.com/security/CVE-2023-47100","https://www.suse.com/security/cve/CVE-2023-47100.html","https://github.com/Perl/perl5/commit/92a9eb3d0d52ec7655c1beb29999a5a5219be664"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-47038","description":"A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer."}]},{"artifact":{"id":"45f87362b5437c73","cpes":["cpe:2.3:a:hsiaoming_yang_\\<me_project:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:mistune:3.0.1:*:*:*:*:*:*:*"],"name":"mistune","purl":"pkg:pypi/mistune@3.0.1","type":"python","version":"3.0.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.3.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qcq2-496w-v96p","versionConstraint":"<3.3.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mistune","version":"3.0.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-qcq2-496w-v96p","fix":{"state":"fixed","versions":["3.3.0"],"available":[{"date":"2026-07-10","kind":"first-observed","version":"3.3.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49851","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-49851","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-49851","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-49851","cwe":"CWE-1333","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-49851","date":"2026-10-27","epss":0.0052,"percentile":0.43996}],"risk":0.40559999999999996,"urls":["https://github.com/lepture/mistune/security/advisories/GHSA-qcq2-496w-v96p","https://nvd.nist.gov/vuln/detail/CVE-2026-49851","https://access.redhat.com/security/cve/CVE-2026-49851","https://bugzilla.redhat.com/show_bug.cgi?id=2492304","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49851.json"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qcq2-496w-v96p","description":"Mistune: Potential DoS via quadratic-time parsing in parse_link_text"},"relatedVulnerabilities":[{"id":"CVE-2026-49851","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49851","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-49851","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-49851","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-49851","cwe":"CWE-1333","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-49851","date":"2026-10-27","epss":0.0052,"percentile":0.43996}],"urls":["https://github.com/lepture/mistune/security/advisories/GHSA-qcq2-496w-v96p","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/security/cve/CVE-2026-49851","https://bugzilla.redhat.com/show_bug.cgi?id=2492304","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49851.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49851","description":"Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear (approximately O(n²)) behavior in parse_link_text. When parsing Markdown containing many consecutive [ characters, parse_link_text repeatedly scans the input using a regex search inside a loop. Each iteration re-scans a large portion of the remaining string, resulting in quadratic-time behavior. An attacker-controlled Markdown input can therefore trigger excessive CPU usage with a very small payload. This vulnerability is fixed in 3.3.0."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-17084","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-17084","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-17084","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.8","3.15.0rc2"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-02","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-01","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-01","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-01","kind":"first-observed","version":"3.14.8"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0rc2"},{"date":"2026-09-09","kind":"first-observed","version":"3.15.0rc2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-17084","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-17084","date":"2026-10-27","epss":0.00734,"percentile":0.542}],"risk":0.40370000000000006,"urls":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","http://www.openwall.com/lists/oss-security/2026/08/18/2"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-17084","description":"The \"stringprep\" module didn't process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unicode codepoint attributes were used \ninstead of the specified Unicode 3.2.0. This behavior would cause \nmismatches when processing domain names using IDNA 2003 (the \"idna\" \ncodec) and the in_table_b2() function of the \"stringprep\" module. This \nonly affects domain names containing characters that were not previously\n registered or had their Unicode attributes such as case-folding \nbehavior updated since Unicode 3.2.0."},"relatedVulnerabilities":[]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-3832","versionConstraint":"< 3.7.3-4ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-3832","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.9"],"available":[{"date":"2026-05-20","kind":"advisory","version":"3.7.3-4ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-3832","cwe":"CWE-179","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3832","date":"2026-10-27","epss":0.00804,"percentile":0.56541}],"risk":0.402,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-3832"},"relatedVulnerabilities":[{"id":"CVE-2026-3832","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3832","cwe":"CWE-179","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3832","date":"2026-10-27","epss":0.00804,"percentile":0.56541}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-3832","https://bugzilla.redhat.com/show_bug.cgi?id=2445762","https://gitlab.com/gnutls/gnutls/-/issues/1801"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3832","description":"A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust."}]},{"artifact":{"id":"9d60751a9fbaf207","cpes":["cpe:2.3:a:python_tornado_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:tornado:6.3.3:*:*:*:*:*:*:*"],"name":"tornado","purl":"pkg:pypi/tornado@6.3.3","type":"python","version":"6.3.3","language":"python","licenses":["Apache-2.0"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"6.5.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-jhmp-mqwm-3gq8","versionConstraint":"<6.5.3 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"tornado","version":"6.3.3"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-jhmp-mqwm-3gq8","fix":{"state":"fixed","versions":["6.5.3"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"6.5.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-67726","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2025-67726","cwe":"CWE-834","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-67726","date":"2026-10-27","epss":0.00535,"percentile":0.44976}],"risk":0.40124999999999994,"urls":["https://github.com/tornadoweb/tornado/security/advisories/GHSA-jhmp-mqwm-3gq8","https://nvd.nist.gov/vuln/detail/CVE-2025-67726","https://github.com/tornadoweb/tornado/commit/771472cfdaeebc0d89a9cc46e249f8891a6b29cd","https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2025-267.yaml","https://github.com/tornadoweb/tornado/releases/tag/v6.5.3"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-jhmp-mqwm-3gq8","description":"Tornado: Quadratic DoS via Crafted Multipart Parameters"},"relatedVulnerabilities":[{"id":"CVE-2025-67726","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-67726","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2025-67726","cwe":"CWE-834","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-67726","date":"2026-10-27","epss":0.00535,"percentile":0.44976}],"urls":["https://github.com/tornadoweb/tornado/commit/771472cfdaeebc0d89a9cc46e249f8891a6b29cd","https://github.com/tornadoweb/tornado/releases/tag/v6.5.3","https://github.com/tornadoweb/tornado/security/advisories/GHSA-jhmp-mqwm-3gq8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-67726","description":"Tornado is a Python web framework and asynchronous networking library. Versions 6.5.2 and below use an inefficient algorithm when parsing parameters for HTTP header values, potentially causing a DoS. The _parseparam function in httputil.py is used to parse specific HTTP header values, such as those in multipart/form-data and repeatedly calls string.count() within a nested loop while processing quoted semicolons. If an attacker sends a request with a large number of maliciously crafted parameters in a Content-Disposition header, the server's CPU usage increases quadratically (O(n²)) during parsing. Due to Tornado's single event loop architecture, a single malicious request can cause the entire server to become unresponsive for an extended period. This issue is fixed in version 6.5.3."}]},{"artifact":{"id":"4bd0adec6e7440e1","cpes":["cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:node.js:*:*","cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:rust:*:*","cpe:2.3:a:isaacs:tar:6.1.15:*:*:*:*:node.js:*:*"],"name":"tar","purl":"pkg:npm/tar@6.1.15","type":"npm","version":"6.1.15","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.21"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-r292-9mhp-454m","versionConstraint":"<=7.5.20 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"tar","version":"6.1.15"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-r292-9mhp-454m","fix":{"state":"fixed","versions":["7.5.21"],"available":[{"date":"2026-07-24","kind":"first-observed","version":"7.5.21"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-73566","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-73566","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-73566","date":"2026-10-27","epss":0.00531,"percentile":0.44682}],"risk":0.39825,"urls":["https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m","https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a","https://github.com/isaacs/node-tar/releases/tag/v7.5.21","https://nvd.nist.gov/vuln/detail/CVE-2026-73566"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-r292-9mhp-454m","description":"node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection"},"relatedVulnerabilities":[{"id":"CVE-2026-73566","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-73566","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-73566","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-73566","date":"2026-10-27","epss":0.00531,"percentile":0.44682}],"urls":["https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a","https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-73566","description":"node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname() and no segment cap when tar.t(...) or tar.x(...) receives a non-empty member-selection list. A crafted GNU L or PAX x long-path header with thousands of slash-separated segments reaches this.filter(entry.path, entry) in Parser[CONSUMEHEADER] in src/parse.ts before Unpack[CHECKPATH] applies maxDepth, causing an uncatchable RangeError stack overflow that terminates asynchronous and streaming Node.js consumers. This issue is fixed in version 7.5.21."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-12718","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-12718","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-12718","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-12718","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2024-12718","date":"2026-10-27","epss":0.00768,"percentile":0.55365}],"risk":0.39552,"urls":["https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f","https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/127987","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-12718","description":"Allows modifying some file metadata (e.g. last modified) with filter=\"data\" or file permissions (chmod) with filter=\"tar\" of files outside the extraction directory.\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don't include the extraction filter feature.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links."},"relatedVulnerabilities":[]},{"artifact":{"id":"28c55cdb8d9bc5f3","cpes":["cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*"],"name":"minimatch","purl":"pkg:npm/minimatch@3.1.2","type":"npm","version":"3.1.2","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/minimatch/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/minimatch/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-23c5-xmqv-rm74","versionConstraint":"<3.1.4 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"minimatch","version":"3.1.2"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-23c5-xmqv-rm74","fix":{"state":"fixed","versions":["3.1.4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"3.1.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27904","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27904","date":"2026-10-27","epss":0.00525,"percentile":0.44314}],"risk":0.39375,"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74","https://nvd.nist.gov/vuln/detail/CVE-2026-27904","https://github.com/isaacs/minimatch/commit/11d0df6165d15a955462316b26d52e5efae06fce"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-23c5-xmqv-rm74","description":"minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions"},"relatedVulnerabilities":[{"id":"CVE-2026-27904","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27904","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27904","date":"2026-10-27","epss":0.00525,"percentile":0.44314}],"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-27904","description":"minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g. `(?:(?:a|b)*)*`), which exhibit catastrophic backtracking in V8. With a 12-byte pattern `*(*(*(a|b)))` and an 18-byte non-matching input, `minimatch()` stalls for over 7 seconds. Adding a single nesting level or a few input characters pushes this to minutes. This is the most severe finding: it is triggered by the default `minimatch()` API with no special options, and the minimum viable pattern is only 12 bytes. The same issue affects `+()` extglobs equally. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 fix the issue."}]},{"artifact":{"id":"821e33cc14bc8e1c","cpes":["cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:node.js:*:*"],"name":"minimatch","purl":"pkg:npm/minimatch@3.1.2","type":"npm","version":"3.1.2","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/minimatch/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/minimatch/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-23c5-xmqv-rm74","versionConstraint":"<3.1.4 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"minimatch","version":"3.1.2"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-23c5-xmqv-rm74","fix":{"state":"fixed","versions":["3.1.4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"3.1.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27904","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27904","date":"2026-10-27","epss":0.00525,"percentile":0.44314}],"risk":0.39375,"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74","https://nvd.nist.gov/vuln/detail/CVE-2026-27904","https://github.com/isaacs/minimatch/commit/11d0df6165d15a955462316b26d52e5efae06fce"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-23c5-xmqv-rm74","description":"minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions"},"relatedVulnerabilities":[{"id":"CVE-2026-27904","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27904","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27904","date":"2026-10-27","epss":0.00525,"percentile":0.44314}],"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-27904","description":"minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g. `(?:(?:a|b)*)*`), which exhibit catastrophic backtracking in V8. With a 12-byte pattern `*(*(*(a|b)))` and an 18-byte non-matching input, `minimatch()` stalls for over 7 seconds. Adding a single nesting level or a few input characters pushes this to minutes. This is the most severe finding: it is triggered by the default `minimatch()` API with no special options, and the minimum viable pattern is only 12 bytes. The same issue affects `+()` extglobs equally. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 fix the issue."}]},{"artifact":{"id":"ae6d5e215786aa99","cpes":["cpe:2.3:a:minimatch_project:minimatch:9.0.3:*:*:*:*:node.js:*:*"],"name":"minimatch","purl":"pkg:npm/minimatch@9.0.3","type":"npm","version":"9.0.3","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/minimatch/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/minimatch/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"9.0.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-23c5-xmqv-rm74","versionConstraint":">=9.0.0,<9.0.7 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"minimatch","version":"9.0.3"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-23c5-xmqv-rm74","fix":{"state":"fixed","versions":["9.0.7"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"9.0.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27904","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27904","date":"2026-10-27","epss":0.00525,"percentile":0.44314}],"risk":0.39375,"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74","https://nvd.nist.gov/vuln/detail/CVE-2026-27904","https://github.com/isaacs/minimatch/commit/11d0df6165d15a955462316b26d52e5efae06fce"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-23c5-xmqv-rm74","description":"minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions"},"relatedVulnerabilities":[{"id":"CVE-2026-27904","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27904","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27904","date":"2026-10-27","epss":0.00525,"percentile":0.44314}],"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-27904","description":"minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g. `(?:(?:a|b)*)*`), which exhibit catastrophic backtracking in V8. With a 12-byte pattern `*(*(*(a|b)))` and an 18-byte non-matching input, `minimatch()` stalls for over 7 seconds. Adding a single nesting level or a few input characters pushes this to minutes. This is the most severe finding: it is triggered by the default `minimatch()` API with no special options, and the minimum viable pattern is only 12 bytes. The same issue affects `+()` extglobs equally. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 fix the issue."}]},{"artifact":{"id":"6d9cf54a34486dd6","cpes":["cpe:2.3:a:minimatch_project:minimatch:9.0.3:*:*:*:*:node.js:*:*"],"name":"minimatch","purl":"pkg:npm/minimatch@9.0.3","type":"npm","version":"9.0.3","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/minimatch/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/minimatch/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"9.0.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-23c5-xmqv-rm74","versionConstraint":">=9.0.0,<9.0.7 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"minimatch","version":"9.0.3"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-23c5-xmqv-rm74","fix":{"state":"fixed","versions":["9.0.7"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"9.0.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27904","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27904","date":"2026-10-27","epss":0.00525,"percentile":0.44314}],"risk":0.39375,"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74","https://nvd.nist.gov/vuln/detail/CVE-2026-27904","https://github.com/isaacs/minimatch/commit/11d0df6165d15a955462316b26d52e5efae06fce"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-23c5-xmqv-rm74","description":"minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions"},"relatedVulnerabilities":[{"id":"CVE-2026-27904","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27904","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-27904","date":"2026-10-27","epss":0.00525,"percentile":0.44314}],"urls":["https://github.com/isaacs/minimatch/security/advisories/GHSA-23c5-xmqv-rm74"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-27904","description":"minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g. `(?:(?:a|b)*)*`), which exhibit catastrophic backtracking in V8. With a 12-byte pattern `*(*(*(a|b)))` and an 18-byte non-matching input, `minimatch()` stalls for over 7 seconds. Adding a single nesting level or a few input characters pushes this to minutes. This is the most severe finding: it is triggered by the default `minimatch()` API with no special options, and the minimum viable pattern is only 12 bytes. The same issue affects `+()` extglobs equally. Versions 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4 fix the issue."}]},{"artifact":{"id":"b45b4832d770f70d","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter_server:2.8.0:*:*:*:*:*:*:*"],"name":"jupyter-server","purl":"pkg:pypi/jupyter-server@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.11.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h56g-gq9v-vc8r","versionConstraint":"<2.11.2 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyter-server","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-h56g-gq9v-vc8r","fix":{"state":"fixed","versions":["2.11.2"],"available":[{"date":"2023-12-06","kind":"first-observed","version":"2.11.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-49080","cwe":"CWE-209","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-49080","date":"2026-10-27","epss":0.00841,"percentile":0.57704}],"risk":0.391065,"urls":["https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-h56g-gq9v-vc8r","https://nvd.nist.gov/vuln/detail/CVE-2023-49080","https://github.com/jupyter-server/jupyter_server/commit/0056c3aa52cbb28b263a7a609ae5f17618b36652","https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server/PYSEC-2023-272.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/62LO7PPIAMLIDEKUOORXLHKLGA6QPL77","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG2JWZI5KPUYMDPS53AIFTZJWZD3IT6I"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h56g-gq9v-vc8r","description":"jupyter-server errors include tracebacks with path information"},"relatedVulnerabilities":[{"id":"CVE-2023-49080","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.5,"impactScore":1.5,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-49080","cwe":"CWE-209","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-49080","date":"2026-10-27","epss":0.00841,"percentile":0.57704}],"urls":["https://github.com/jupyter-server/jupyter_server/commit/0056c3aa52cbb28b263a7a609ae5f17618b36652","https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-h56g-gq9v-vc8r","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/62LO7PPIAMLIDEKUOORXLHKLGA6QPL77/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG2JWZI5KPUYMDPS53AIFTZJWZD3IT6I/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-49080","description":"The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. Unhandled errors in API requests coming from an authenticated user include traceback information, which can include path information. There is no known mechanism by which to trigger these errors without authentication, so the paths revealed are not considered particularly sensitive, given that the requesting user has arbitrary execution permissions already in the same environment. A fix has been introduced in commit `0056c3aa52` which no longer includes traceback information in JSON error responses. For compatibility, the traceback field is present, but always empty. This commit has been included in version 2.11.2. Users are advised to upgrade. There are no known workarounds for this vulnerability."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-6395","versionConstraint":"< 3.7.3-4ubuntu1.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-6395","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.7"],"available":[{"date":"2025-07-14","kind":"advisory","version":"3.7.3-4ubuntu1.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-6395","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-6395","date":"2026-10-27","epss":0.00771,"percentile":0.55451}],"risk":0.3855,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-6395"},"relatedVulnerabilities":[{"id":"CVE-2025-6395","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6395","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-6395","date":"2026-10-27","epss":0.00771,"percentile":0.55451}],"urls":["https://access.redhat.com/errata/RHSA-2025:16115","https://access.redhat.com/errata/RHSA-2025:16116","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:17348","https://access.redhat.com/errata/RHSA-2025:17361","https://access.redhat.com/errata/RHSA-2025:17415","https://access.redhat.com/errata/RHSA-2025:19088","https://access.redhat.com/errata/RHSA-2025:22529","https://access.redhat.com/security/cve/CVE-2025-6395","https://bugzilla.redhat.com/show_bug.cgi?id=2376755","https://gitlab.com/gnutls/gnutls/-/issues/1718","https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html","http://www.openwall.com/lists/oss-security/2025/07/11/3","https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-6395","description":"A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite()."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5260","versionConstraint":"< 3.7.3-4ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-5260","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.9"],"available":[{"date":"2026-05-20","kind":"advisory","version":"3.7.3-4ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-5260","cwe":"CWE-126","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5260","date":"2026-10-27","epss":0.00769,"percentile":0.55391}],"risk":0.3845,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5260"},"relatedVulnerabilities":[{"id":"CVE-2026-5260","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5260","cwe":"CWE-126","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5260","date":"2026-10-27","epss":0.00769,"percentile":0.55391}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:67837","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:77320","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82811","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-5260","https://bugzilla.redhat.com/show_bug.cgi?id=2467450","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-10"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5260","description":"A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure."}]},{"artifact":{"id":"c08fe2fe58d4c369","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyterlab:4.0.7:*:*:*:*:*:*:*"],"name":"jupyterlab","purl":"pkg:pypi/jupyterlab@4.0.7","type":"python","version":"4.0.7","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.5.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rch3-82jr-f9w9","versionConstraint":"<=4.5.6 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyterlab","version":"4.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-rch3-82jr-f9w9","fix":{"state":"fixed","versions":["4.5.7"],"available":[{"date":"2026-05-01","kind":"first-observed","version":"4.5.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40171","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-40171","date":"2026-10-27","epss":0.00476,"percentile":0.40959}],"risk":0.37842000000000003,"urls":["https://github.com/jupyter/notebook/security/advisories/GHSA-rch3-82jr-f9w9","https://jupyterlab.readthedocs.io/en/latest/user/commands.html#commands-in-markdown-output-and-files","https://nvd.nist.gov/vuln/detail/CVE-2026-40171"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rch3-82jr-f9w9","description":"Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS"},"relatedVulnerabilities":[{"id":"CVE-2026-40171","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40171","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-40171","date":"2026-10-27","epss":0.00476,"percentile":0.40959}],"urls":["https://github.com/jupyter/notebook/security/advisories/GHSA-rch3-82jr-f9w9"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40171","description":"In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with attacker-controlled notebook content to steal authentication tokens with a single click.\n\nAn attacker can craft a malicious notebook file containing elements that appear indistinguishable from legitimate controls and trigger execution when a user interacts with them. Successful exploitation allows theft of the user's authentication token and complete takeover of the Jupyter session through the REST API, including reading files, creating or modifying files, accessing kernels to execute arbitrary code, and creating terminals for shell access. This issue has been fixed in Notebook 7.5.6, JupyterLab 4.5.7, @jupyter-notebook/help-extension 7.5.6, and @jupyterlab/help-extension 4.5.7. As a workaround, disable the affected help extensions or set allowCommandLinker to false in the sanitizer configuration."}]},{"artifact":{"id":"01853ae3313818ca","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:notebook:7.0.6:*:*:*:*:*:*:*"],"name":"notebook","purl":"pkg:pypi/notebook@7.0.6","type":"python","version":"7.0.6","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rch3-82jr-f9w9","versionConstraint":">=7.0.0,<=7.5.5 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"notebook","version":"7.0.6"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-rch3-82jr-f9w9","fix":{"state":"fixed","versions":["7.5.6"],"available":[{"date":"2026-05-01","kind":"first-observed","version":"7.5.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40171","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-40171","date":"2026-10-27","epss":0.00476,"percentile":0.40959}],"risk":0.37842000000000003,"urls":["https://github.com/jupyter/notebook/security/advisories/GHSA-rch3-82jr-f9w9","https://jupyterlab.readthedocs.io/en/latest/user/commands.html#commands-in-markdown-output-and-files","https://nvd.nist.gov/vuln/detail/CVE-2026-40171"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rch3-82jr-f9w9","description":"Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS"},"relatedVulnerabilities":[{"id":"CVE-2026-40171","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40171","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-40171","date":"2026-10-27","epss":0.00476,"percentile":0.40959}],"urls":["https://github.com/jupyter/notebook/security/advisories/GHSA-rch3-82jr-f9w9"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40171","description":"In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with attacker-controlled notebook content to steal authentication tokens with a single click.\n\nAn attacker can craft a malicious notebook file containing elements that appear indistinguishable from legitimate controls and trigger execution when a user interacts with them. Successful exploitation allows theft of the user's authentication token and complete takeover of the Jupyter session through the REST API, including reading files, creating or modifying files, accessing kernels to execute arbitrary code, and creating terminals for shell access. This issue has been fixed in Notebook 7.5.6, JupyterLab 4.5.7, @jupyter-notebook/help-extension 7.5.6, and @jupyterlab/help-extension 4.5.7. As a workaround, disable the affected help extensions or set allowCommandLinker to false in the sanitizer configuration."}]},{"artifact":{"id":"9bfa8bd71796afc6","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.19.2-2ubuntu0.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.4"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.19.2-2ubuntu0.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-27","epss":0.00748,"percentile":0.54698}],"risk":0.374,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37370"},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-27","epss":0.00748,"percentile":0.54698}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"7570e146ba37f512","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.19.2-2ubuntu0.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.4"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.19.2-2ubuntu0.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-27","epss":0.00748,"percentile":0.54698}],"risk":0.374,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37370"},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-27","epss":0.00748,"percentile":0.54698}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"513c46e2da3930be","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.19.2-2ubuntu0.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.4"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.19.2-2ubuntu0.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-27","epss":0.00748,"percentile":0.54698}],"risk":0.374,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37370"},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-27","epss":0.00748,"percentile":0.54698}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"09c4acfd49c598b7","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.19.2-2ubuntu0.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.4"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.19.2-2ubuntu0.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-27","epss":0.00748,"percentile":0.54698}],"risk":0.374,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37370"},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-27","epss":0.00748,"percentile":0.54698}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"5390fed82fe316fb","cpes":["cpe:2.3:a:pandoc:pandoc:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"pandoc","purl":"pkg:deb/ubuntu/pandoc@2.9.2.1-3ubuntu2?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"2.9.2.1-3ubuntu2","language":"","licenses":["BSD-3-Clause~Glasgow","BSD-3-clause~JohnMacFarlane","CC-BY-SA-3.0","GPL-2","GPL-2+","GPL-3","GPL-3+","ISC","MS-RL","WTFPL-2","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/pandoc/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/pandoc/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/pandoc.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/pandoc.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/pandoc.list","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/pandoc.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-51591","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pandoc","version":"2.9.2.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-51591","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-51591","cwe":"CWE-918","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-51591","date":"2026-10-27","epss":0.00738,"percentile":0.54332}],"risk":0.369,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-51591"},"relatedVulnerabilities":[{"id":"CVE-2025-51591","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-51591","cwe":"CWE-918","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-51591","date":"2026-10-27","epss":0.00738,"percentile":0.54332}],"urls":["https://github.com/RealestName/Vulnerability-Research/tree/main/CVE-2025-51591","https://github.com/jgm/pandoc/discussions/11200","https://github.com/jgm/pandoc/issues/10682","https://github.com/jgm/pandoc/issues/11261","https://github.com/jgm/pandoc/issues/8874","https://github.com/jgm/pandoc/pull/11262","https://www.wiz.io/blog/imds-anomaly-hunting-zero-day","https://github.com/jgm/pandoc/commit/67edf7ce7cd3563a180ae44bd122b012e22364f8","https://pandoc.org","not-applicable:http://jgm.com/","not-applicable:http://pandoc.com/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-51591","description":"A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe. Note: Some users have stated that Pandoc by default can retrieve and parse untrusted HTML content which can enable SSRF vulnerabilities. Using the ‘--sandbox’ option or ‘pandoc-server’ can mitigate such vulnerabilities. Using pandoc with an external ‘--pdf-engine’ can also enable SSRF vulnerabilities, such as CVE-2022-35583 in wkhtmltopdf."}]},{"artifact":{"id":"01e7c7b777eb5e07","cpes":["cpe:2.3:a:pandoc-data:pandoc-data:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:pandoc-data:pandoc_data:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:pandoc_data:pandoc-data:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:pandoc_data:pandoc_data:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:pandoc:pandoc-data:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:pandoc:pandoc_data:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"pandoc-data","purl":"pkg:deb/ubuntu/pandoc-data@2.9.2.1-3ubuntu2?arch=all&distro=ubuntu-22.04&upstream=pandoc","type":"deb","version":"2.9.2.1-3ubuntu2","language":"","licenses":["BSD-3-Clause~Glasgow","BSD-3-clause~JohnMacFarlane","CC-BY-SA-3.0","GPL-2","GPL-2+","GPL-3","GPL-3+","ISC","MS-RL","WTFPL-2","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/pandoc-data/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/pandoc-data/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/pandoc-data.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/pandoc-data.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/pandoc-data.list","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/pandoc-data.list"}],"upstreams":[{"name":"pandoc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-51591","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pandoc","version":"2.9.2.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-51591","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-51591","cwe":"CWE-918","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-51591","date":"2026-10-27","epss":0.00738,"percentile":0.54332}],"risk":0.369,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-51591"},"relatedVulnerabilities":[{"id":"CVE-2025-51591","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-51591","cwe":"CWE-918","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-51591","date":"2026-10-27","epss":0.00738,"percentile":0.54332}],"urls":["https://github.com/RealestName/Vulnerability-Research/tree/main/CVE-2025-51591","https://github.com/jgm/pandoc/discussions/11200","https://github.com/jgm/pandoc/issues/10682","https://github.com/jgm/pandoc/issues/11261","https://github.com/jgm/pandoc/issues/8874","https://github.com/jgm/pandoc/pull/11262","https://www.wiz.io/blog/imds-anomaly-hunting-zero-day","https://github.com/jgm/pandoc/commit/67edf7ce7cd3563a180ae44bd122b012e22364f8","https://pandoc.org","not-applicable:http://jgm.com/","not-applicable:http://pandoc.com/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-51591","description":"A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe. Note: Some users have stated that Pandoc by default can retrieve and parse untrusted HTML content which can enable SSRF vulnerabilities. Using the ‘--sandbox’ option or ‘pandoc-server’ can mitigate such vulnerabilities. Using pandoc with an external ‘--pdf-engine’ can also enable SSRF vulnerabilities, such as CVE-2022-35583 in wkhtmltopdf."}]},{"artifact":{"id":"4bd0adec6e7440e1","cpes":["cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:node.js:*:*","cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:rust:*:*","cpe:2.3:a:isaacs:tar:6.1.15:*:*:*:*:node.js:*:*"],"name":"tar","purl":"pkg:npm/tar@6.1.15","type":"npm","version":"6.1.15","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.10"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qffp-2rhf-9h96","versionConstraint":"<=7.5.9 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"tar","version":"6.1.15"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-qffp-2rhf-9h96","fix":{"state":"fixed","versions":["7.5.10"],"available":[{"date":"2026-03-05","kind":"first-observed","version":"7.5.10"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-29786","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-29786","cwe":"CWE-59","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-29786","cwe":"CWE-22","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2026-29786","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-29786","date":"2026-10-27","epss":0.00466,"percentile":0.40158}],"risk":0.36580999999999997,"urls":["https://github.com/isaacs/node-tar/security/advisories/GHSA-qffp-2rhf-9h96","https://github.com/isaacs/node-tar/commit/7bc755dd85e623c0279e08eb3784909e6d7e4b9f","https://nvd.nist.gov/vuln/detail/CVE-2026-29786"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qffp-2rhf-9h96","description":"tar has Hardlink Path Traversal via Drive-Relative Linkpath"},"relatedVulnerabilities":[{"id":"CVE-2026-29786","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.3,"impactScore":4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":8.6,"impactScore":4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-29786","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-29786","cwe":"CWE-59","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-29786","cwe":"CWE-22","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2026-29786","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-29786","date":"2026-10-27","epss":0.00466,"percentile":0.40158}],"urls":["https://github.com/isaacs/node-tar/commit/7bc755dd85e623c0279e08eb3784909e6d7e4b9f","https://github.com/isaacs/node-tar/security/advisories/GHSA-qffp-2rhf-9h96","https://access.redhat.com/security/cve/CVE-2026-29786","https://bugzilla.redhat.com/show_bug.cgi?id=2445476","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29786.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-29786","description":"node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction directory by using a drive-relative link target such as C:../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This issue has been patched in version 7.5.10."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42015","versionConstraint":"< 3.7.3-4ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-42015","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.9"],"available":[{"date":"2026-05-20","kind":"advisory","version":"3.7.3-4ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-42015","cwe":"CWE-193","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42015","date":"2026-10-27","epss":0.00727,"percentile":0.53955}],"risk":0.36350000000000005,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42015"},"relatedVulnerabilities":[{"id":"CVE-2026-42015","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42015","cwe":"CWE-193","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42015","date":"2026-10-27","epss":0.00727,"percentile":0.53955}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-42015","https://bugzilla.redhat.com/show_bug.cgi?id=2467678","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-11"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42015","description":"A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts."}]},{"artifact":{"id":"ac58ae6b9cb939ec","cpes":["cpe:2.3:a:jupyter_lsp_contributors_project:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp_contributors_project:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp_contributorsproject:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp_contributorsproject:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp_contributors_project:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp_contributors_project:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp_contributors:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp_contributors:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp_contributorsproject:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp_contributorsproject:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project_jupyter_project:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project_jupyter_project:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project_jupyterproject:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project_jupyterproject:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-lsp:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-lsp:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_lsp:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_lsp:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp_contributors:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp_contributors:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project_jupyter_project:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project_jupyter_project:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project-jupyter:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project-jupyter:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project_jupyter:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project_jupyter:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project_jupyterproject:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project_jupyterproject:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-lsp:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-lsp:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-lsp:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-lsp:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_lsp:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_lsp:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project-jupyter:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project-jupyter:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project_jupyter:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:project_jupyter:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-lsp:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-lsp:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_lsp:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter_lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter-lsp:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter_lsp:2.2.0:*:*:*:*:*:*:*"],"name":"jupyter-lsp","purl":"pkg:pypi/jupyter-lsp@2.2.0","type":"python","version":"2.2.0","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_lsp-2.2.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_lsp-2.2.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_lsp-2.2.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_lsp-2.2.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_lsp-2.2.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_lsp-2.2.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_lsp-2.2.0.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_lsp-2.2.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.2.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4qhp-652w-c22x","versionConstraint":"<=2.2.1 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyter-lsp","version":"2.2.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-4qhp-652w-c22x","fix":{"state":"fixed","versions":["2.2.2"],"available":[{"date":"2024-01-19","kind":"first-observed","version":"2.2.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22415","cwe":"CWE-23","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22415","cwe":"CWE-284","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22415","cwe":"CWE-306","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22415","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-22415","date":"2026-10-27","epss":0.00491,"percentile":0.42019}],"risk":0.36334,"urls":["https://github.com/jupyter-lsp/jupyterlab-lsp/security/advisories/GHSA-4qhp-652w-c22x","https://github.com/jupyter-lsp/jupyterlab-lsp/releases/tag/v5.0.2","https://nvd.nist.gov/vuln/detail/CVE-2024-22415","https://github.com/jupyter-lsp/jupyterlab-lsp/commit/4ad12f204ad0b85580fc32137c647baaff044e95"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4qhp-652w-c22x","description":"Unsecured endpoints in the jupyter-lsp server extension"},"relatedVulnerabilities":[{"id":"CVE-2024-22415","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22415","cwe":"CWE-23","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22415","cwe":"CWE-284","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22415","cwe":"CWE-306","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22415","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-22415","date":"2026-10-27","epss":0.00491,"percentile":0.42019}],"urls":["https://github.com/jupyter-lsp/jupyterlab-lsp/commit/4ad12f204ad0b85580fc32137c647baaff044e95","https://github.com/jupyter-lsp/jupyterlab-lsp/security/advisories/GHSA-4qhp-652w-c22x"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22415","description":"jupyter-lsp is a coding assistance tool for JupyterLab (code navigation + hover suggestions + linters + autocompletion + rename) using Language Server Protocol. Installations of jupyter-lsp running in environments without configured file system access control (on the operating system level), and with jupyter-server instances exposed to non-trusted network are vulnerable to unauthorised access and modification of file system beyond the jupyter root directory. This issue has been patched in version 2.2.2 and all users are advised to upgrade. Users unable to upgrade should uninstall jupyter-lsp."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28834","versionConstraint":"< 3.7.3-4ubuntu1.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-28834","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.5"],"available":[{"date":"2024-04-15","kind":"advisory","version":"3.7.3-4ubuntu1.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28834","cwe":"CWE-327","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-28834","date":"2026-10-27","epss":0.00724,"percentile":0.5384}],"risk":0.362,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28834"},"relatedVulnerabilities":[{"id":"CVE-2024-28834","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28834","cwe":"CWE-327","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-28834","date":"2026-10-27","epss":0.00724,"percentile":0.5384}],"urls":["https://access.redhat.com/errata/RHSA-2024:1784","https://access.redhat.com/errata/RHSA-2024:1879","https://access.redhat.com/errata/RHSA-2024:1997","https://access.redhat.com/errata/RHSA-2024:2044","https://access.redhat.com/errata/RHSA-2024:2570","https://access.redhat.com/errata/RHSA-2024:2889","https://access.redhat.com/security/cve/CVE-2024-28834","https://bugzilla.redhat.com/show_bug.cgi?id=2269228","https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html","https://minerva.crocs.fi.muni.cz/","http://www.openwall.com/lists/oss-security/2024/03/22/1","http://www.openwall.com/lists/oss-security/2024/03/22/2","https://lists.debian.org/debian-lts-announce/2024/09/msg00019.html","https://people.redhat.com/~hkario/marvin/","https://security.netapp.com/advisory/ntap-20240524-0004/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28834","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel."}]},{"artifact":{"id":"680ad1ef8d2de90f","cpes":["cpe:2.3:a:libcmark-gfm-extensions0.29.0.gfm.3:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm-extensions0.29.0.gfm.3:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm_extensions0.29.0.gfm.3:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm_extensions0.29.0.gfm.3:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark-gfm-extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark_gfm_extensions0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*"],"name":"libcmark-gfm-extensions0.29.0.gfm.3","purl":"pkg:deb/ubuntu/libcmark-gfm-extensions0.29.0.gfm.3@0.29.0.gfm.3-3?arch=amd64&distro=ubuntu-22.04&upstream=cmark-gfm","type":"deb","version":"0.29.0.gfm.3-3","language":"","licenses":["Apache","BSD-2-clause","CC-BY-SA-4.0","Expat","Unicode"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcmark-gfm-extensions0.29.0.gfm.3/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/libcmark-gfm-extensions0.29.0.gfm.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcmark-gfm-extensions0.29.0.gfm.3:amd64.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/libcmark-gfm-extensions0.29.0.gfm.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cmark-gfm"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-22485","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"cmark-gfm","version":"0.29.0.gfm.3-3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-22485","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-22485","cwe":"CWE-125","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22485","cwe":"CWE-91","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22485","date":"2026-10-27","epss":0.00723,"percentile":0.53801}],"risk":0.36150000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-22485"},"relatedVulnerabilities":[{"id":"CVE-2023-22485","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-22485","cwe":"CWE-125","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22485","cwe":"CWE-91","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22485","date":"2026-10-27","epss":0.00723,"percentile":0.53801}],"urls":["https://github.com/github/cmark-gfm/security/advisories/GHSA-c944-cv5f-hpvr"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-22485","description":"cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the `validate_protocol` function. We believe this bug is harmless in practice, because the out-of-bounds read accesses `malloc` metadata without causing any visible damage.This vulnerability has been patched in 0.29.0.gfm.7."}]},{"artifact":{"id":"15a5ed723d6f6533","cpes":["cpe:2.3:a:libcmark-gfm0.29.0.gfm.3:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark-gfm0.29.0.gfm.3:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm0.29.0.gfm.3:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark_gfm0.29.0.gfm.3:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark-gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*","cpe:2.3:a:libcmark:libcmark_gfm0.29.0.gfm.3:0.29.0.gfm.3-3:*:*:*:*:*:*:*"],"name":"libcmark-gfm0.29.0.gfm.3","purl":"pkg:deb/ubuntu/libcmark-gfm0.29.0.gfm.3@0.29.0.gfm.3-3?arch=amd64&distro=ubuntu-22.04&upstream=cmark-gfm","type":"deb","version":"0.29.0.gfm.3-3","language":"","licenses":["Apache","BSD-2-clause","CC-BY-SA-4.0","Expat","Unicode"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcmark-gfm0.29.0.gfm.3/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/libcmark-gfm0.29.0.gfm.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcmark-gfm0.29.0.gfm.3:amd64.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/libcmark-gfm0.29.0.gfm.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cmark-gfm"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-22485","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"cmark-gfm","version":"0.29.0.gfm.3-3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-22485","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-22485","cwe":"CWE-125","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22485","cwe":"CWE-91","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22485","date":"2026-10-27","epss":0.00723,"percentile":0.53801}],"risk":0.36150000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-22485"},"relatedVulnerabilities":[{"id":"CVE-2023-22485","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-22485","cwe":"CWE-125","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-22485","cwe":"CWE-91","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-22485","date":"2026-10-27","epss":0.00723,"percentile":0.53801}],"urls":["https://github.com/github/cmark-gfm/security/advisories/GHSA-c944-cv5f-hpvr"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-22485","description":"cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown document can trigger an out-of-bounds read in the `validate_protocol` function. We believe this bug is harmless in practice, because the out-of-bounds read accesses `malloc` metadata without causing any visible damage.This vulnerability has been patched in 0.29.0.gfm.7."}]},{"artifact":{"id":"b45b4832d770f70d","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter_server:2.8.0:*:*:*:*:*:*:*"],"name":"jupyter-server","purl":"pkg:pypi/jupyter-server@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.20.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-fcw5-x6j4-ccmp","versionConstraint":"<=2.19.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyter-server","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-fcw5-x6j4-ccmp","fix":{"state":"fixed","versions":["2.20.0"],"available":[{"date":"2026-06-19","kind":"first-observed","version":"2.20.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-44727","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-44727","cwe":"CWE-1021","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-44727","cwe":"CWE-79","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2026-44727","cwe":"CWE-79","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-44727","date":"2026-10-27","epss":0.00438,"percentile":0.37903}],"risk":0.3580650000000001,"urls":["https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-fcw5-x6j4-ccmp","https://github.com/jupyter-server/jupyter_server/commit/6cbee8d65e71abac851c4492fea987ad080580bd","https://nvd.nist.gov/vuln/detail/CVE-2026-44727","https://access.redhat.com/security/cve/CVE-2026-44727","https://bugzilla.redhat.com/show_bug.cgi?id=2491516","https://github.com/jupyter-server/jupyter_server","https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server/PYSEC-2026-366.yaml","https://pypi.org/project/jupyter-server","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44727.json","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:60520"],"severity":"Critical","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-fcw5-x6j4-ccmp","description":"Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP"},"relatedVulnerabilities":[{"id":"CVE-2026-44727","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-44727","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-44727","cwe":"CWE-1021","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-44727","cwe":"CWE-79","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2026-44727","cwe":"CWE-79","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-44727","date":"2026-10-27","epss":0.00438,"percentile":0.37903}],"urls":["https://github.com/jupyter-server/jupyter_server/commit/6cbee8d65e71abac851c4492fea987ad080580bd","https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-fcw5-x6j4-ccmp","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/security/cve/CVE-2026-44727","https://bugzilla.redhat.com/show_bug.cgi?id=2491516","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44727.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-44727","description":"Jupyter Server is the backend for Jupyter web applications. Prior to 2.20, the nbconvert HTTP handlers in jupyter_server render user-authored notebook HTML under the Jupyter origin without a sandbox directive in their Content-Security-Policy. Combined with nbconvert.HTMLExporter's default non-sanitizing behavior, a notebook carrying an HTML payload in a display_data output triggers stored XSS with cookie access, full /api/* authority, and kernel RCE. This vulnerability is fixed in 2.20."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-7774","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-7774","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-7774","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b2"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-05","kind":"first-observed","version":"3.15.0b2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7774","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7774","date":"2026-10-27","epss":0.00598,"percentile":0.48435}],"risk":0.35580999999999996,"urls":["https://github.com/python/cpython/commit/0478bd83d82b255e0f29f613367a59d261e7eaa2","https://github.com/python/cpython/commit/0d28f5e46e151718972dfabd91205444d0037b6d","https://github.com/python/cpython/commit/10a13bee3c24f9c62b602e696334ff2272a40efc","https://github.com/python/cpython/commit/578411982c16f753f4893532510099ef665117da","https://github.com/python/cpython/commit/5cf47a248c35c375d610b87b2f72fd1ed454b558","https://github.com/python/cpython/commit/74cca9a92fb7d653e404843a56b8bdc7b0afdbbf","https://github.com/python/cpython/commit/c063191cb7f9170f9565e305f8aa2b79ab2bf609","https://github.com/python/cpython/issues/149486","https://github.com/python/cpython/pull/149487","https://mail.python.org/archives/list/security-announce@python.org/thread/4FU62L2M6RMMHT2QPGQNPEHHUND7CEX5/","http://www.openwall.com/lists/oss-security/2026/06/04/9"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7774","description":"tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination directory, subject to the permissions of the extracting process."},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3644","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3644","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3644","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.13","3.14.4","3.15.0a8"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a8"},{"date":"2026-09-15","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.14"},{"date":"2026-04-10","kind":"first-observed","version":"3.13.13"},{"date":"2026-04-10","kind":"first-observed","version":"3.14.4"},{"date":"2026-04-10","kind":"first-observed","version":"3.15.0a8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3644","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-3644","cwe":"CWE-116","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3644","date":"2026-10-27","epss":0.00497,"percentile":0.42408}],"risk":0.3541125,"urls":["https://github.com/python/cpython/commit/3974092b037f9a3b000fb15b48ea61ce3b25d330","https://github.com/python/cpython/commit/556aa098e738b127c714866f819b4abe2f7593d8","https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4","https://github.com/python/cpython/commit/62ceb396fcbe69da1ded3702de586f4072b590dd","https://github.com/python/cpython/commit/d16ecc6c3626f0e2cc8f08c309c83934e8a979dd","https://github.com/python/cpython/commit/dae4b1a21f8df4570e30986affd61bbe4ade4cef","https://github.com/python/cpython/issues/145599","https://github.com/python/cpython/pull/145600","https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3644","description":"The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output()."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45445","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-45445","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-45445","cwe":"CWE-325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-45445","date":"2026-10-27","epss":0.00704,"percentile":0.53121}],"risk":0.35200000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-45445"},"relatedVulnerabilities":[{"id":"CVE-2026-45445","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45445","cwe":"CWE-325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-45445","date":"2026-10-27","epss":0.00704,"percentile":0.53121}],"urls":["https://github.com/openssl/openssl/commit/323f0b6e7d530a4cb4336d50c88cb70f3ac2a451","https://github.com/openssl/openssl/commit/787a6dfba81b7b09c1e05ab31396c0cd7c36b3f7","https://github.com/openssl/openssl/commit/7ac4715234ee72d9f3c93426a2c08554b5b771af","https://github.com/openssl/openssl/commit/843c9b94ca9c2ed248bb30127bb4f3d7af0d607c","https://github.com/openssl/openssl/commit/983d54b5cce8d16147548ed1a37892d1720bbab6","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45445","description":"Issue summary: When an application drives an AES-OCB context through the\npublic EVP_Cipher() one-shot interface, the application-supplied\ninitialisation vector (IV) is silently discarded.\n\nImpact summary: Every message encrypted under the same key uses the\nsame effective nonce regardless of the IV supplied by the caller,\nresulting in (key, nonce) reuse and loss of confidentiality.  If the\nsame code path is used to compute the authentication tag, the tag\ndepends only on the (key, IV) pair and not on the plaintext or\nciphertext, allowing universal forgery of arbitrary ciphertext from a\nsingle captured message.\n\nOpenSSL provides two ways to drive a cipher: the documented streaming\ninterface (EVP_CipherUpdate / EVP_CipherFinal_ex) and a lower-level\none-shot, EVP_Cipher(), whose documentation explicitly recommends\nagainst use by applications in favour of EVP_CipherUpdate() and\nEVP_CipherFinal_ex().  The OCB provider's streaming handler flushes\nthe application-supplied IV into the OCB context before processing\ndata; the one-shot handler did not.  Every call to EVP_Cipher() on an\nAES-OCB context therefore ran with the all-zero key-derived offset\nstate left by cipher initialisation, regardless of the caller's IV.\n\nIf EVP_EncryptFinal_ex() is subsequently used to obtain the\nauthentication tag, the deferred IV setup runs at that point and\nclears the running checksum that should have been accumulated over the\nplaintext.  The resulting tag is a function of (key, IV) only and\nverifies against any ciphertext produced under the same (key, IV)\npair.\n\nThe OpenSSL SSL/TLS implementation is not affected: AES-OCB is not a\nTLS cipher suite, and libssl does not call EVP_Cipher() in any case.\nApplications that drive AES-OCB through the documented streaming AEAD\nAPI (EVP_CipherUpdate / EVP_CipherFinal_ex) are not affected.  Only\napplications that combine the AES-OCB cipher with the EVP_Cipher()\none-shot API are vulnerable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as AES-OCB is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-45445","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-45445","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-45445","cwe":"CWE-325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-45445","date":"2026-10-27","epss":0.00704,"percentile":0.53121}],"risk":0.35200000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-45445"},"relatedVulnerabilities":[{"id":"CVE-2026-45445","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45445","cwe":"CWE-325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-45445","date":"2026-10-27","epss":0.00704,"percentile":0.53121}],"urls":["https://github.com/openssl/openssl/commit/323f0b6e7d530a4cb4336d50c88cb70f3ac2a451","https://github.com/openssl/openssl/commit/787a6dfba81b7b09c1e05ab31396c0cd7c36b3f7","https://github.com/openssl/openssl/commit/7ac4715234ee72d9f3c93426a2c08554b5b771af","https://github.com/openssl/openssl/commit/843c9b94ca9c2ed248bb30127bb4f3d7af0d607c","https://github.com/openssl/openssl/commit/983d54b5cce8d16147548ed1a37892d1720bbab6","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45445","description":"Issue summary: When an application drives an AES-OCB context through the\npublic EVP_Cipher() one-shot interface, the application-supplied\ninitialisation vector (IV) is silently discarded.\n\nImpact summary: Every message encrypted under the same key uses the\nsame effective nonce regardless of the IV supplied by the caller,\nresulting in (key, nonce) reuse and loss of confidentiality.  If the\nsame code path is used to compute the authentication tag, the tag\ndepends only on the (key, IV) pair and not on the plaintext or\nciphertext, allowing universal forgery of arbitrary ciphertext from a\nsingle captured message.\n\nOpenSSL provides two ways to drive a cipher: the documented streaming\ninterface (EVP_CipherUpdate / EVP_CipherFinal_ex) and a lower-level\none-shot, EVP_Cipher(), whose documentation explicitly recommends\nagainst use by applications in favour of EVP_CipherUpdate() and\nEVP_CipherFinal_ex().  The OCB provider's streaming handler flushes\nthe application-supplied IV into the OCB context before processing\ndata; the one-shot handler did not.  Every call to EVP_Cipher() on an\nAES-OCB context therefore ran with the all-zero key-derived offset\nstate left by cipher initialisation, regardless of the caller's IV.\n\nIf EVP_EncryptFinal_ex() is subsequently used to obtain the\nauthentication tag, the deferred IV setup runs at that point and\nclears the running checksum that should have been accumulated over the\nplaintext.  The resulting tag is a function of (key, IV) only and\nverifies against any ciphertext produced under the same (key, IV)\npair.\n\nThe OpenSSL SSL/TLS implementation is not affected: AES-OCB is not a\nTLS cipher suite, and libssl does not call EVP_Cipher() in any case.\nApplications that drive AES-OCB through the documented streaming AEAD\nAPI (EVP_CipherUpdate / EVP_CipherFinal_ex) are not affected.  Only\napplications that combine the AES-OCB cipher with the EVP_Cipher()\none-shot API are vulnerable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as AES-OCB is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"45f87362b5437c73","cpes":["cpe:2.3:a:hsiaoming_yang_\\<me_project:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:mistune:3.0.1:*:*:*:*:*:*:*"],"name":"mistune","purl":"pkg:pypi/mistune@3.0.1","type":"python","version":"3.0.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.3.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h7ww-273w-6cm8","versionConstraint":"<=3.2.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mistune","version":"3.0.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-h7ww-273w-6cm8","fix":{"state":"fixed","versions":["3.3.0"],"available":[{"date":"2026-10-24","kind":"first-observed","version":"3.3.0"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-115355","cwe":"CWE-22","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-115355","date":"2026-10-27","epss":0.00461,"percentile":0.39757}],"risk":0.34575000000000006,"urls":["https://github.com/lepture/mistune/security/advisories/GHSA-h7ww-273w-6cm8","https://nvd.nist.gov/vuln/detail/CVE-2026-115355","https://github.com/lepture/mistune/commit/1bef343ade163fc3bb95572b15be720084cdb993","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://www.vulncheck.com/advisories/mistune-before-3.3.0-path-traversal-and-xss-via-include-directive"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h7ww-273w-6cm8","description":"Mistune: Path Traversal and XSS in Include directive"},"relatedVulnerabilities":[{"id":"CVE-2026-115355","cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115355","cwe":"CWE-22","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-115355","date":"2026-10-27","epss":0.00461,"percentile":0.39757}],"urls":["https://github.com/lepture/mistune/security/advisories/GHSA-h7ww-273w-6cm8","https://www.vulncheck.com/advisories/mistune-before-3.3.0-path-traversal-and-xss-via-include-directive"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115355","description":"Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read arbitrary files by supplying ../ sequences in include paths. Attackers can also inject HTML through unescaped error messages and included file contents to perform cross-site scripting even when escape=True is set."}]},{"artifact":{"id":"e96226d2d0270ce0","cpes":["cpe:2.3:a:libgcrypt20:libgcrypt20:1.9.4-3ubuntu3:*:*:*:*:*:*:*"],"name":"libgcrypt20","purl":"pkg:deb/ubuntu/libgcrypt20@1.9.4-3ubuntu3?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"1.9.4-3ubuntu3","language":"","licenses":["sha256:8bf0ea526b7b497bf7b31842e799c37caa69090cc53fd080c76403cc8b79f659"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgcrypt20/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgcrypt20/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgcrypt20:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgcrypt20:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.9.4-3ubuntu3.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-2236","versionConstraint":"< 1.9.4-3ubuntu3.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"libgcrypt20","version":"1.9.4-3ubuntu3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-2236","fix":{"state":"fixed","versions":["1.9.4-3ubuntu3.3"],"available":[{"date":"2026-09-01","kind":"advisory","version":"1.9.4-3ubuntu3.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2236","cwe":"CWE-385","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-2236","date":"2026-10-27","epss":0.0114,"percentile":0.66452}],"risk":0.34199999999999997,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2236"},"relatedVulnerabilities":[{"id":"CVE-2024-2236","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2236","cwe":"CWE-385","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-2236","date":"2026-10-27","epss":0.0114,"percentile":0.66452}],"urls":["https://access.redhat.com/errata/RHSA-2024:9404","https://access.redhat.com/errata/RHSA-2025:3530","https://access.redhat.com/errata/RHSA-2025:3534","https://access.redhat.com/security/cve/CVE-2024-2236","https://bugzilla.redhat.com/show_bug.cgi?id=2245218","https://bugzilla.redhat.com/show_bug.cgi?id=2268268","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2236","description":"A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts."}]},{"artifact":{"id":"77066e7e6d2a4d57","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.19"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6j4f-fj2g-mc7p","versionConstraint":"<1.1.19 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-6j4f-fj2g-mc7p","fix":{"state":"fixed","versions":["1.1.19"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"1.1.19"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102276","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102276","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102276","date":"2026-10-27","epss":0.00455,"percentile":0.3933}],"risk":0.34125,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p","https://nvd.nist.gov/vuln/detail/CVE-2026-102276","https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc","https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c","https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc","https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6j4f-fj2g-mc7p","description":"brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-102276","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102276","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102276","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102276","date":"2026-10-27","epss":0.00455,"percentile":0.3933}],"urls":["https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc","https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c","https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc","https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102276","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10."}]},{"artifact":{"id":"4192b772fea9db3e","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.19"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6j4f-fj2g-mc7p","versionConstraint":"<1.1.19 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-6j4f-fj2g-mc7p","fix":{"state":"fixed","versions":["1.1.19"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"1.1.19"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102276","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102276","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102276","date":"2026-10-27","epss":0.00455,"percentile":0.3933}],"risk":0.34125,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p","https://nvd.nist.gov/vuln/detail/CVE-2026-102276","https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc","https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c","https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc","https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6j4f-fj2g-mc7p","description":"brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-102276","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102276","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102276","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102276","date":"2026-10-27","epss":0.00455,"percentile":0.3933}],"urls":["https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc","https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c","https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc","https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102276","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10."}]},{"artifact":{"id":"fa77c1473ae8947b","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.1.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6j4f-fj2g-mc7p","versionConstraint":">=2.0.0,<2.1.5 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-6j4f-fj2g-mc7p","fix":{"state":"fixed","versions":["2.1.5"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.1.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102276","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102276","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102276","date":"2026-10-27","epss":0.00455,"percentile":0.3933}],"risk":0.34125,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p","https://nvd.nist.gov/vuln/detail/CVE-2026-102276","https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc","https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c","https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc","https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6j4f-fj2g-mc7p","description":"brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-102276","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102276","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102276","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102276","date":"2026-10-27","epss":0.00455,"percentile":0.3933}],"urls":["https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc","https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c","https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc","https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102276","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10."}]},{"artifact":{"id":"b08ada23090bcd4d","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.1.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6j4f-fj2g-mc7p","versionConstraint":">=2.0.0,<2.1.5 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-6j4f-fj2g-mc7p","fix":{"state":"fixed","versions":["2.1.5"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.1.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102276","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102276","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102276","date":"2026-10-27","epss":0.00455,"percentile":0.3933}],"risk":0.34125,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p","https://nvd.nist.gov/vuln/detail/CVE-2026-102276","https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc","https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c","https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc","https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6j4f-fj2g-mc7p","description":"brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-102276","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102276","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102276","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102276","date":"2026-10-27","epss":0.00455,"percentile":0.3933}],"urls":["https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc","https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c","https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc","https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102276","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per brace group and uses push.apply to pass every element of a very large comma-part array as a function argument. Patterns containing many comma-separated brace groups trigger the recursive path, while the large array triggers the argument-array path without deep recursion. These paths cause recursive and argument-array native stack exhaustion before max or maxLength can limit output, potentially terminating the Node.js process in a process-terminating denial of service. This issue is fixed in versions 1.1.19, 2.1.5, 3.0.7, and 5.0.10."}]},{"artifact":{"id":"77066e7e6d2a4d57","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.20"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qhr7-859c-m2p7","versionConstraint":"<1.1.20 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-qhr7-859c-m2p7","fix":{"state":"fixed","versions":["1.1.20"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"1.1.20"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102278","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102278","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102278","date":"2026-10-27","epss":0.00455,"percentile":0.39329}],"risk":0.34125,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7","https://nvd.nist.gov/vuln/detail/CVE-2026-102278","https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qhr7-859c-m2p7","description":"brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-102278","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102278","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102278","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102278","date":"2026-10-27","epss":0.00455,"percentile":0.39329}],"urls":["https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102278","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11."}]},{"artifact":{"id":"4192b772fea9db3e","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.20"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qhr7-859c-m2p7","versionConstraint":"<1.1.20 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-qhr7-859c-m2p7","fix":{"state":"fixed","versions":["1.1.20"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"1.1.20"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102278","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102278","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102278","date":"2026-10-27","epss":0.00455,"percentile":0.39329}],"risk":0.34125,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7","https://nvd.nist.gov/vuln/detail/CVE-2026-102278","https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qhr7-859c-m2p7","description":"brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-102278","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102278","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102278","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102278","date":"2026-10-27","epss":0.00455,"percentile":0.39329}],"urls":["https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102278","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11."}]},{"artifact":{"id":"fa77c1473ae8947b","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.1.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qhr7-859c-m2p7","versionConstraint":">=2.0.0,<2.1.6 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-qhr7-859c-m2p7","fix":{"state":"fixed","versions":["2.1.6"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.1.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102278","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102278","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102278","date":"2026-10-27","epss":0.00455,"percentile":0.39329}],"risk":0.34125,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7","https://nvd.nist.gov/vuln/detail/CVE-2026-102278","https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qhr7-859c-m2p7","description":"brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-102278","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102278","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102278","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102278","date":"2026-10-27","epss":0.00455,"percentile":0.39329}],"urls":["https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102278","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11."}]},{"artifact":{"id":"b08ada23090bcd4d","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.1.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qhr7-859c-m2p7","versionConstraint":">=2.0.0,<2.1.6 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-qhr7-859c-m2p7","fix":{"state":"fixed","versions":["2.1.6"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.1.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102278","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102278","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102278","date":"2026-10-27","epss":0.00455,"percentile":0.39329}],"risk":0.34125,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7","https://nvd.nist.gov/vuln/detail/CVE-2026-102278","https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qhr7-859c-m2p7","description":"brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-102278","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102278","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102278","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102278","date":"2026-10-27","epss":0.00455,"percentile":0.39329}],"urls":["https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b","https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c","https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102278","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand_() to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before output limits can apply and potentially terminating the Node.js process. expand_ performs uncontrolled recursion for nested brace alternatives and single-part sets. deeply nested brace groups supplied as an untrusted pattern. expand_ is affected. expand is affected. Comma members is affected. Single set is affected. native stack exhaustion during nested sub-expansion. process-terminating denial of service. This issue is fixed in versions 1.1.20, 2.1.6, 3.0.8, and 5.0.11."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.17"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-4603","versionConstraint":"< 3.0.2-0ubuntu1.17 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-4603","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.17"],"available":[{"date":"2024-07-31","kind":"advisory","version":"3.0.2-0ubuntu1.17"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-4603","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-4603","cwe":"CWE-834","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-4603","date":"2026-10-27","epss":0.01131,"percentile":0.66257}],"risk":0.33930000000000005,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-4603"},"relatedVulnerabilities":[{"id":"CVE-2024-4603","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4603","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-4603","cwe":"CWE-834","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-4603","date":"2026-10-27","epss":0.01131,"percentile":0.66257}],"urls":["https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397","https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e","https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d","https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740","https://www.openssl.org/news/secadv/20240516.txt","http://www.openwall.com/lists/oss-security/2024/05/16/2","https://security.netapp.com/advisory/ntap-20240621-0001/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4603","description":"Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.17"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-4603","versionConstraint":"< 3.0.2-0ubuntu1.17 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-4603","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.17"],"available":[{"date":"2024-07-31","kind":"advisory","version":"3.0.2-0ubuntu1.17"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-4603","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-4603","cwe":"CWE-834","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-4603","date":"2026-10-27","epss":0.01131,"percentile":0.66257}],"risk":0.33930000000000005,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-4603"},"relatedVulnerabilities":[{"id":"CVE-2024-4603","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4603","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-4603","cwe":"CWE-834","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-4603","date":"2026-10-27","epss":0.01131,"percentile":0.66257}],"urls":["https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397","https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e","https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d","https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740","https://www.openssl.org/news/secadv/20240516.txt","http://www.openwall.com/lists/oss-security/2024/05/16/2","https://security.netapp.com/advisory/ntap-20240621-0001/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4603","description":"Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue."}]},{"artifact":{"id":"4bd0adec6e7440e1","cpes":["cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:node.js:*:*","cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:rust:*:*","cpe:2.3:a:isaacs:tar:6.1.15:*:*:*:*:node.js:*:*"],"name":"tar","purl":"pkg:npm/tar@6.1.15","type":"npm","version":"6.1.15","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.18"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8x88-c5mf-7j5w","versionConstraint":"<=7.5.17 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"tar","version":"6.1.15"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-8x88-c5mf-7j5w","fix":{"state":"fixed","versions":["7.5.18"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"7.5.18"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59874","cwe":"CWE-835","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59874","date":"2026-10-27","epss":0.00434,"percentile":0.3749}],"risk":0.33852,"urls":["https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w","https://nvd.nist.gov/vuln/detail/CVE-2026-59874","https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5","https://github.com/isaacs/node-tar/releases/tag/v7.5.18"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8x88-c5mf-7j5w","description":"node-tar: Negative tar entry size causes infinite loop in archive replace"},"relatedVulnerabilities":[{"id":"CVE-2026-59874","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59874","cwe":"CWE-835","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59874","date":"2026-10-27","epss":0.00434,"percentile":0.3749}],"urls":["https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5","https://github.com/isaacs/node-tar/releases/tag/v7.5.18","https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59874","description":"node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18."}]},{"artifact":{"id":"9bfa8bd71796afc6","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-26461","versionConstraint":"< 1.19.2-2ubuntu0.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-26461","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.6"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.19.2-2ubuntu0.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-27","epss":0.01128,"percentile":0.66179}],"risk":0.3384,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-26461"},"relatedVulnerabilities":[{"id":"CVE-2024-26461","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-27","epss":0.01128,"percentile":0.66179}],"urls":["https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md","https://security.netapp.com/advisory/ntap-20240415-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26461","description":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c."}]},{"artifact":{"id":"7570e146ba37f512","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-26461","versionConstraint":"< 1.19.2-2ubuntu0.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-26461","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.6"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.19.2-2ubuntu0.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-27","epss":0.01128,"percentile":0.66179}],"risk":0.3384,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-26461"},"relatedVulnerabilities":[{"id":"CVE-2024-26461","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-27","epss":0.01128,"percentile":0.66179}],"urls":["https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md","https://security.netapp.com/advisory/ntap-20240415-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26461","description":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c."}]},{"artifact":{"id":"513c46e2da3930be","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-26461","versionConstraint":"< 1.19.2-2ubuntu0.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-26461","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.6"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.19.2-2ubuntu0.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-27","epss":0.01128,"percentile":0.66179}],"risk":0.3384,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-26461"},"relatedVulnerabilities":[{"id":"CVE-2024-26461","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-27","epss":0.01128,"percentile":0.66179}],"urls":["https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md","https://security.netapp.com/advisory/ntap-20240415-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26461","description":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c."}]},{"artifact":{"id":"09c4acfd49c598b7","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-26461","versionConstraint":"< 1.19.2-2ubuntu0.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-26461","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.6"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.19.2-2ubuntu0.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-27","epss":0.01128,"percentile":0.66179}],"risk":0.3384,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-26461"},"relatedVulnerabilities":[{"id":"CVE-2024-26461","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-27","epss":0.01128,"percentile":0.66179}],"urls":["https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md","https://security.netapp.com/advisory/ntap-20240415-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26461","description":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c."}]},{"artifact":{"id":"9d60751a9fbaf207","cpes":["cpe:2.3:a:python_tornado_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:tornado:6.3.3:*:*:*:*:*:*:*"],"name":"tornado","purl":"pkg:pypi/tornado@6.3.3","type":"python","version":"6.3.3","language":"python","licenses":["Apache-2.0"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"6.5.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3x9g-8vmp-wqvf","versionConstraint":"<6.5.6 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"tornado","version":"6.3.3"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-3x9g-8vmp-wqvf","fix":{"state":"fixed","versions":["6.5.6"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"6.5.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":7.7,"impactScore":4,"exploitabilityScore":3.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49853","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49853","date":"2026-10-27","epss":0.00445,"percentile":0.38566}],"risk":0.3382,"urls":["https://github.com/tornadoweb/tornado/security/advisories/GHSA-3x9g-8vmp-wqvf"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3x9g-8vmp-wqvf","description":"Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient"},"relatedVulnerabilities":[{"id":"CVE-2026-49853","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":7.7,"impactScore":4,"exploitabilityScore":3.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49853","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-49853","date":"2026-10-27","epss":0.00445,"percentile":0.38566}],"urls":["https://github.com/tornadoweb/tornado/commit/aba2569f7ed7a6bdbef816658fb6b7182531b751","https://github.com/tornadoweb/tornado/pull/3626","https://github.com/tornadoweb/tornado/releases/tag/v6.5.6","https://github.com/tornadoweb/tornado/security/advisories/GHSA-3x9g-8vmp-wqvf"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49853","description":"Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving Authorization, auth_username, auth_password, and auth_mode in place when a redirect changed scheme, host, or port. This issue is fixed in version 6.5.6."}]},{"artifact":{"id":"28cfc0a0b958dc4d","cpes":["cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2-8-0:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2_8_0:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2_8_0:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2-8:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2-8:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2_8:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2_8:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*"],"name":"libpcre2-8-0","purl":"pkg:deb/ubuntu/libpcre2-8-0@10.39-3ubuntu0.1?arch=amd64&distro=ubuntu-22.04&upstream=pcre2","type":"deb","version":"10.39-3ubuntu0.1","language":"","licenses":["sha256:f65dae37239e4d61a1bdeaf2ded76b8569d012a054aa042233b78615e7a83210"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpcre2-8-0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libpcre2-8-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpcre2-8-0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpcre2-8-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"pcre2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-41409","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pcre2","version":"10.39-3ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2022-41409","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-41409","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41409","date":"2026-10-27","epss":0.01121,"percentile":0.6602}],"risk":0.3363,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-41409"},"relatedVulnerabilities":[{"id":"CVE-2022-41409","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41409","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41409","date":"2026-10-27","epss":0.01121,"percentile":0.6602}],"urls":["https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35","https://github.com/PCRE2Project/pcre2/issues/141"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41409","description":"Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input."}]},{"artifact":{"id":"c0b145b45a6f9d3f","cpes":["cpe:2.3:a:wget:wget:1.21.2-2ubuntu1:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/ubuntu/wget@1.21.2-2ubuntu1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"1.21.2-2ubuntu1","language":"","licenses":["sha256:c58cb5a2d94f35f0e9b0f1a038d48b73477aa12782ff17328c21d8a86f5f99d5"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.21.2-2ubuntu1.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-38428","versionConstraint":"< 1.21.2-2ubuntu1.1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"wget","version":"1.21.2-2ubuntu1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-38428","fix":{"state":"fixed","versions":["1.21.2-2ubuntu1.1"],"available":[{"date":"2024-06-26","kind":"advisory","version":"1.21.2-2ubuntu1.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-38428","cwe":"CWE-436","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-38428","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38428","date":"2026-10-27","epss":0.00672,"percentile":0.51856}],"risk":0.336,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-38428"},"relatedVulnerabilities":[{"id":"CVE-2024-38428","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38428","cwe":"CWE-436","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-38428","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38428","date":"2026-10-27","epss":0.00672,"percentile":0.51856}],"urls":["https://git.savannah.gnu.org/cgit/wget.git/commit/?id=ed0c7c7e0e8f7298352646b2fd6e06a11e242ace","https://lists.gnu.org/archive/html/bug-wget/2024-06/msg00005.html","https://lists.debian.org/debian-lts-announce/2025/04/msg00029.html","https://security.netapp.com/advisory/ntap-20241115-0005/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-38428","description":"url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-9669","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-9669","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-9669","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b3"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-25","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-25","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-25","kind":"first-observed","version":"3.15.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9669","cwe":"CWE-121","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-9669","date":"2026-10-27","epss":0.00428,"percentile":0.3683}],"risk":0.33597999999999995,"urls":["https://github.com/python/cpython/commit/157a5df8cb5d82b33f918a7489e72ce95ceb12b6","https://github.com/python/cpython/commit/1ba6135eae75ad8413413caeeedb56ae72320636","https://github.com/python/cpython/commit/5755d0f083949ff3c5bf3a37e673e24e306b036e","https://github.com/python/cpython/commit/619a12b2e545391dc436b3af79dda22337382a6f","https://github.com/python/cpython/commit/938ec030e90c5e53f1faac6fab1643f14e4f4a79","https://github.com/python/cpython/commit/991e6cf86496718c4ef00b362d640e00cb5c85b2","https://github.com/python/cpython/commit/d3ca26983dfbccdf609f24ff5877dc3118e4702d","https://github.com/python/cpython/issues/150599","https://github.com/python/cpython/pull/150600","https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/","http://www.openwall.com/lists/oss-security/2026/06/08/17"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9669","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data."},"relatedVulnerabilities":[]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-14831","versionConstraint":"< 3.7.3-4ubuntu1.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-14831","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.8"],"available":[{"date":"2026-02-16","kind":"advisory","version":"3.7.3-4ubuntu1.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-14831","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-14831","date":"2026-10-27","epss":0.00666,"percentile":0.51615}],"risk":0.333,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-14831"},"relatedVulnerabilities":[{"id":"CVE-2025-14831","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-14831","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-14831","date":"2026-10-27","epss":0.00666,"percentile":0.51615}],"urls":["https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:16008","https://access.redhat.com/errata/RHSA-2026:16009","https://access.redhat.com/errata/RHSA-2026:16174","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:3477","https://access.redhat.com/errata/RHSA-2026:4188","https://access.redhat.com/errata/RHSA-2026:4655","https://access.redhat.com/errata/RHSA-2026:4943","https://access.redhat.com/errata/RHSA-2026:5585","https://access.redhat.com/errata/RHSA-2026:5606","https://access.redhat.com/errata/RHSA-2026:6618","https://access.redhat.com/errata/RHSA-2026:6630","https://access.redhat.com/errata/RHSA-2026:6737","https://access.redhat.com/errata/RHSA-2026:6738","https://access.redhat.com/errata/RHSA-2026:7329","https://access.redhat.com/errata/RHSA-2026:7335","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:8746","https://access.redhat.com/errata/RHSA-2026:8747","https://access.redhat.com/errata/RHSA-2026:8748","https://access.redhat.com/security/cve/CVE-2025-14831","https://bugzilla.redhat.com/show_bug.cgi?id=2423177","https://gitlab.com/gnutls/gnutls/-/issues/1773","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-14831","description":"A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs)."}]},{"artifact":{"id":"4bd0adec6e7440e1","cpes":["cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:node.js:*:*","cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:rust:*:*","cpe:2.3:a:isaacs:tar:6.1.15:*:*:*:*:node.js:*:*"],"name":"tar","purl":"pkg:npm/tar@6.1.15","type":"npm","version":"6.1.15","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.18"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-w8wr-v893-vjvp","versionConstraint":"<=7.5.17 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"tar","version":"6.1.15"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-w8wr-v893-vjvp","fix":{"state":"fixed","versions":["7.5.18"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"7.5.18"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59871","cwe":"CWE-704","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59871","date":"2026-10-27","epss":0.00644,"percentile":0.50659}],"risk":0.33166,"urls":["https://github.com/isaacs/node-tar/security/advisories/GHSA-w8wr-v893-vjvp","https://nvd.nist.gov/vuln/detail/CVE-2026-59871","https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b","https://github.com/isaacs/node-tar/releases/tag/v7.5.18"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-w8wr-v893-vjvp","description":"node-tar: Process crash via PAX numeric path type confusion"},"relatedVulnerabilities":[{"id":"CVE-2026-59871","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59871","cwe":"CWE-704","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59871","date":"2026-10-27","epss":0.00644,"percentile":0.50659}],"urls":["https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b","https://github.com/isaacs/node-tar/releases/tag/v7.5.18","https://github.com/isaacs/node-tar/security/advisories/GHSA-w8wr-v893-vjvp"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59871","description":"node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers, causing downstream path handling such as normalizeWindowsPath(entry.path).split('/') to throw an uncaught TypeError. This issue is fixed in version 7.5.18."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.30"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75806","versionConstraint":"< 3.0.2-0ubuntu1.30 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-75806","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.30"],"available":[{"date":"2026-09-29","kind":"advisory","version":"3.0.2-0ubuntu1.30"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-75806","cwe":"CWE-1284","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75806","date":"2026-10-27","epss":0.01104,"percentile":0.65601}],"risk":0.3312,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-75806"},"relatedVulnerabilities":[{"id":"CVE-2026-75806","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75806","cwe":"CWE-1284","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75806","date":"2026-10-27","epss":0.01104,"percentile":0.65601}],"urls":["https://github.com/openssl/openssl/commit/04728a289a823e68137f88da016cb9ede307217d","https://github.com/openssl/openssl/commit/050b275cd671a6eed1d6457642d41a5a77aab972","https://github.com/openssl/openssl/commit/3a4589d015a9049d47b66f186cf50a8711343a1d","https://github.com/openssl/openssl/commit/5af82fefbaf2b5fec2fc0e1d87f112844902f01d","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75806","description":"Issue summary: An established DTLS 1.2 association using an AEAD cipher suite\ncan be terminated by a single unauthenticated datagram whose encrypted\nfragment is shorter than the mandatory explicit IV and authentication tag\noverhead.\n\nImpact summary: An attacker who can send a datagram that is routed to an\nexisting DTLS 1.2 association can tear that association down without knowing\nany key material. This is a Denial of Service limited to the targeted\nassociation. There is no memory safety or confidentiality impact.\n\nCWE: CWE-1284: Improper Validation of Specified Quantity in Input\n\nDescription: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher\nsuite carries an explicit IV followed by the ciphertext and an authentication\ntag. When decrypting such a record the record layer passed the record length to\nthe cipher implementation before checking that the record was long enough to\ncontain the explicit IV and the tag. For a record shorter than that overhead the\ncipher implementation rejected the impossible length, and the record layer\ntreated this as an internal failure and raised a fatal internal_error alert\ninstead of treating the record as one that failed authentication.\n\nIn TLS 1.2 the same record causes a fatal internal_error alert instead of the\nexpected bad_record_mac alert. Since any undecryptable record already\nterminates a TLS connection, this is a protocol conformance issue rather than\na security issue in TLS.\n\nThe fix validates the record length against the explicit IV and tag length\nbefore any AEAD processing, so that TLS reports bad_record_mac and DTLS\nsilently discards the record.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.30"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-75806","versionConstraint":"< 3.0.2-0ubuntu1.30 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-75806","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.30"],"available":[{"date":"2026-09-29","kind":"advisory","version":"3.0.2-0ubuntu1.30"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-75806","cwe":"CWE-1284","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75806","date":"2026-10-27","epss":0.01104,"percentile":0.65601}],"risk":0.3312,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-75806"},"relatedVulnerabilities":[{"id":"CVE-2026-75806","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75806","cwe":"CWE-1284","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75806","date":"2026-10-27","epss":0.01104,"percentile":0.65601}],"urls":["https://github.com/openssl/openssl/commit/04728a289a823e68137f88da016cb9ede307217d","https://github.com/openssl/openssl/commit/050b275cd671a6eed1d6457642d41a5a77aab972","https://github.com/openssl/openssl/commit/3a4589d015a9049d47b66f186cf50a8711343a1d","https://github.com/openssl/openssl/commit/5af82fefbaf2b5fec2fc0e1d87f112844902f01d","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75806","description":"Issue summary: An established DTLS 1.2 association using an AEAD cipher suite\ncan be terminated by a single unauthenticated datagram whose encrypted\nfragment is shorter than the mandatory explicit IV and authentication tag\noverhead.\n\nImpact summary: An attacker who can send a datagram that is routed to an\nexisting DTLS 1.2 association can tear that association down without knowing\nany key material. This is a Denial of Service limited to the targeted\nassociation. There is no memory safety or confidentiality impact.\n\nCWE: CWE-1284: Improper Validation of Specified Quantity in Input\n\nDescription: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher\nsuite carries an explicit IV followed by the ciphertext and an authentication\ntag. When decrypting such a record the record layer passed the record length to\nthe cipher implementation before checking that the record was long enough to\ncontain the explicit IV and the tag. For a record shorter than that overhead the\ncipher implementation rejected the impossible length, and the record layer\ntreated this as an internal failure and raised a fatal internal_error alert\ninstead of treating the record as one that failed authentication.\n\nIn TLS 1.2 the same record causes a fatal internal_error alert instead of the\nexpected bad_record_mac alert. Since any undecryptable record already\nterminates a TLS connection, this is a protocol conformance issue rather than\na security issue in TLS.\n\nThe fix validates the record length against the explicit IV and tag length\nbefore any AEAD processing, so that TLS reports bad_record_mac and DTLS\nsilently discards the record.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-11468","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-11468","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-11468","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3","3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.3"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-04-10","kind":"first-observed","version":"3.10.20"},{"date":"2026-04-10","kind":"first-observed","version":"3.11.15"},{"date":"2026-04-10","kind":"first-observed","version":"3.12.13"},{"date":"2026-03-03","kind":"first-observed","version":"3.13.12"},{"date":"2026-03-03","kind":"first-observed","version":"3.14.3"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-11468","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-11468","date":"2026-10-27","epss":0.00616,"percentile":0.49274}],"risk":0.32956,"urls":["https://github.com/python/cpython/commit/003b8315669b9f08b1010a49071f73f15f818094","https://github.com/python/cpython/commit/17d1490aa97bd6b98a42b1a9b324ead84e7fd8a2","https://github.com/python/cpython/commit/61614a5e5056e4f61ced65008d4576f3df34acb6","https://github.com/python/cpython/commit/a76e4cd62dd68e7cbe86e37e6ed988495a646b66","https://github.com/python/cpython/commit/e9970f077240c7c670e8a6fc6662f2b30d3b6ad0","https://github.com/python/cpython/commit/f738386838021c762efea6c9802c82de65e87796","https://github.com/python/cpython/issues/143935","https://github.com/python/cpython/pull/143936","https://mail.python.org/archives/list/security-announce@python.org/thread/FELSEOLBI2QR6YLG6Q7VYF7FWSGQTKLI/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-11468","description":"When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized."},"relatedVulnerabilities":[]},{"artifact":{"id":"c08fe2fe58d4c369","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyterlab:4.0.7:*:*:*:*:*:*:*"],"name":"jupyterlab","purl":"pkg:pypi/jupyterlab@4.0.7","type":"python","version":"4.0.7","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.0.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4m77-cmpx-vjc4","versionConstraint":">=4.0.0,<=4.0.10 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyterlab","version":"4.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-4m77-cmpx-vjc4","fix":{"state":"fixed","versions":["4.0.11"],"available":[{"date":"2024-01-20","kind":"first-observed","version":"4.0.11"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22420","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22420","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-22420","date":"2026-10-27","epss":0.00573,"percentile":0.47141}],"risk":0.32947499999999996,"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-4m77-cmpx-vjc4","https://github.com/jupyterlab/jupyterlab/commit/dda0033cd49449572d077bbecd33b18d8d05f48a","https://nvd.nist.gov/vuln/detail/CVE-2024-22420","https://github.com/jupyterlab/jupyterlab/commit/e1b3aabab603878e46add445a3114e838411d2df","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQJKNRDRFMKGVRIYNNN6CKMNJDNYWO2H/"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4m77-cmpx-vjc4","description":"JupyterLab vulnerable to SXSS in Markdown Preview"},"relatedVulnerabilities":[{"id":"CVE-2024-22420","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22420","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22420","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-22420","date":"2026-10-27","epss":0.00573,"percentile":0.47141}],"urls":["https://github.com/jupyterlab/jupyterlab/commit/e1b3aabab603878e46add445a3114e838411d2df","https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-4m77-cmpx-vjc4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQJKNRDRFMKGVRIYNNN6CKMNJDNYWO2H/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22420","description":"JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. JupyterLab version 4.0.11 has been patched. Users are advised to upgrade. Users unable to upgrade should disable the table of contents extension."}]},{"artifact":{"id":"01853ae3313818ca","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:notebook:7.0.6:*:*:*:*:*:*:*"],"name":"notebook","purl":"pkg:pypi/notebook@7.0.6","type":"python","version":"7.0.6","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.0.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4m77-cmpx-vjc4","versionConstraint":">=7.0.0,<=7.0.6 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"notebook","version":"7.0.6"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-4m77-cmpx-vjc4","fix":{"state":"fixed","versions":["7.0.7"],"available":[{"date":"2024-01-20","kind":"first-observed","version":"7.0.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22420","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22420","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-22420","date":"2026-10-27","epss":0.00573,"percentile":0.47141}],"risk":0.32947499999999996,"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-4m77-cmpx-vjc4","https://github.com/jupyterlab/jupyterlab/commit/dda0033cd49449572d077bbecd33b18d8d05f48a","https://nvd.nist.gov/vuln/detail/CVE-2024-22420","https://github.com/jupyterlab/jupyterlab/commit/e1b3aabab603878e46add445a3114e838411d2df","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQJKNRDRFMKGVRIYNNN6CKMNJDNYWO2H/"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4m77-cmpx-vjc4","description":"JupyterLab vulnerable to SXSS in Markdown Preview"},"relatedVulnerabilities":[{"id":"CVE-2024-22420","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22420","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22420","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-22420","date":"2026-10-27","epss":0.00573,"percentile":0.47141}],"urls":["https://github.com/jupyterlab/jupyterlab/commit/e1b3aabab603878e46add445a3114e838411d2df","https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-4m77-cmpx-vjc4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQJKNRDRFMKGVRIYNNN6CKMNJDNYWO2H/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22420","description":"JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. JupyterLab version 4.0.11 has been patched. Users are advised to upgrade. Users unable to upgrade should disable the table of contents extension."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87910","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.15.0a1, < 3.15.0rc3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87910","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.15.0a1, < 3.15.0rc3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87910","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.15.0rc3"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-02","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-01","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-01","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-08","kind":"first-observed","version":"3.15.0rc3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87910","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-87910","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-87910","date":"2026-10-27","epss":0.00609,"percentile":0.48965}],"risk":0.325815,"urls":["https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/pull/157266","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","http://www.openwall.com/lists/oss-security/2026/09/11/8"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87910","description":"When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None."},"relatedVulnerabilities":[]},{"artifact":{"id":"9bfa8bd71796afc6","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40355","versionConstraint":"< 1.19.2-2ubuntu0.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-40355","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.8"],"available":[{"date":"2026-07-22","kind":"advisory","version":"1.19.2-2ubuntu0.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-27","epss":0.00645,"percentile":0.50724}],"risk":0.3225,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-40355"},"relatedVulnerabilities":[{"id":"CVE-2026-40355","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-27","epss":0.00645,"percentile":0.50724}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."}]},{"artifact":{"id":"7570e146ba37f512","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40355","versionConstraint":"< 1.19.2-2ubuntu0.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-40355","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.8"],"available":[{"date":"2026-07-22","kind":"advisory","version":"1.19.2-2ubuntu0.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-27","epss":0.00645,"percentile":0.50724}],"risk":0.3225,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-40355"},"relatedVulnerabilities":[{"id":"CVE-2026-40355","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-27","epss":0.00645,"percentile":0.50724}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."}]},{"artifact":{"id":"513c46e2da3930be","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40355","versionConstraint":"< 1.19.2-2ubuntu0.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-40355","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.8"],"available":[{"date":"2026-07-22","kind":"advisory","version":"1.19.2-2ubuntu0.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-27","epss":0.00645,"percentile":0.50724}],"risk":0.3225,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-40355"},"relatedVulnerabilities":[{"id":"CVE-2026-40355","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-27","epss":0.00645,"percentile":0.50724}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."}]},{"artifact":{"id":"09c4acfd49c598b7","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40355","versionConstraint":"< 1.19.2-2ubuntu0.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-40355","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.8"],"available":[{"date":"2026-07-22","kind":"advisory","version":"1.19.2-2ubuntu0.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-27","epss":0.00645,"percentile":0.50724}],"risk":0.3225,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-40355"},"relatedVulnerabilities":[{"id":"CVE-2026-40355","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-27","epss":0.00645,"percentile":0.50724}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."}]},{"artifact":{"id":"c0b145b45a6f9d3f","cpes":["cpe:2.3:a:wget:wget:1.21.2-2ubuntu1:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/ubuntu/wget@1.21.2-2ubuntu1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"1.21.2-2ubuntu1","language":"","licenses":["sha256:c58cb5a2d94f35f0e9b0f1a038d48b73477aa12782ff17328c21d8a86f5f99d5"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-10524","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"wget","version":"1.21.2-2ubuntu1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-10524","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2024-10524","cwe":"CWE-918","type":"Secondary","source":"reefs@jfrog.com"}],"epss":[{"cve":"CVE-2024-10524","date":"2026-10-27","epss":0.01071,"percentile":0.64686}],"risk":0.32130000000000003,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-10524"},"relatedVulnerabilities":[{"id":"CVE-2024-10524","cvss":[{"type":"Secondary","source":"reefs@jfrog.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":3.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-10524","cwe":"CWE-918","type":"Secondary","source":"reefs@jfrog.com"}],"epss":[{"cve":"CVE-2024-10524","date":"2026-10-27","epss":0.01071,"percentile":0.64686}],"urls":["https://git.savannah.gnu.org/cgit/wget.git/commit/?id=c419542d956a2607bbce5df64b9d378a8588d778","https://jfrog.com/blog/cve-2024-10524-wget-zero-day-vulnerability/","https://seclists.org/oss-sec/2024/q4/107","http://www.openwall.com/lists/oss-security/2024/11/18/6","https://security.netapp.com/advisory/ntap-20250321-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-10524","description":"Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host."}]},{"artifact":{"id":"34ea66bcdaab73e8","cpes":["cpe:2.3:a:jose_padilla_project:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla_project:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla_project:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*"],"name":"pyjwt","purl":"pkg:pypi/pyjwt@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.13.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-xgmm-8j9v-c9wx","versionConstraint":"<2.13.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"pyjwt","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-xgmm-8j9v-c9wx","fix":{"state":"fixed","versions":["2.13.0"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"2.13.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48526","cwe":"CWE-287","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-48526","cwe":"CWE-347","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-48526","cwe":"CWE-347","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-48526","date":"2026-10-27","epss":0.00427,"percentile":0.36759}],"risk":0.31811500000000004,"urls":["https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx","https://nvd.nist.gov/vuln/detail/CVE-2026-48526","https://github.com/pypa/advisory-database/tree/main/vulns/pyjwt/PYSEC-2026-179.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-xgmm-8j9v-c9wx","description":"PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed"},"relatedVulnerabilities":[{"id":"CVE-2026-48526","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48526","cwe":"CWE-287","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-48526","cwe":"CWE-347","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-48526","cwe":"CWE-347","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-48526","date":"2026-10-27","epss":0.00427,"percentile":0.36759}],"urls":["https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx","https://access.redhat.com/errata/RHSA-2026:25902","https://access.redhat.com/errata/RHSA-2026:25928","https://access.redhat.com/errata/RHSA-2026:26206","https://access.redhat.com/errata/RHSA-2026:28571","https://access.redhat.com/errata/RHSA-2026:30076","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:33683","https://access.redhat.com/errata/RHSA-2026:34160","https://access.redhat.com/errata/RHSA-2026:34365","https://access.redhat.com/errata/RHSA-2026:34374","https://access.redhat.com/errata/RHSA-2026:35835","https://access.redhat.com/errata/RHSA-2026:35836","https://access.redhat.com/errata/RHSA-2026:35837","https://access.redhat.com/errata/RHSA-2026:35845","https://access.redhat.com/errata/RHSA-2026:36350","https://access.redhat.com/errata/RHSA-2026:37275","https://access.redhat.com/errata/RHSA-2026:40967","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:42132","https://access.redhat.com/errata/RHSA-2026:42142","https://access.redhat.com/errata/RHSA-2026:42144","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:48085","https://access.redhat.com/errata/RHSA-2026:50222","https://access.redhat.com/errata/RHSA-2026:50223","https://access.redhat.com/errata/RHSA-2026:50263","https://access.redhat.com/errata/RHSA-2026:50319","https://access.redhat.com/errata/RHSA-2026:50336","https://access.redhat.com/errata/RHSA-2026:50340","https://access.redhat.com/errata/RHSA-2026:50904","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/security/cve/CVE-2026-48526","https://bugzilla.redhat.com/show_bug.cgi?id=2482734","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48526.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48526","description":"PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker to use the issuer public key as the secret key for HMAC algorithm. This vulnerability is fixed in 2.13.0."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42766","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-42766","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-42766","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42766","date":"2026-10-27","epss":0.0106,"percentile":0.64367}],"risk":0.318,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42766"},"relatedVulnerabilities":[{"id":"CVE-2026-42766","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42766","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42766","date":"2026-10-27","epss":0.0106,"percentile":0.64367}],"urls":["https://github.com/openssl/openssl/commit/056d06c1918fafbb98c1c85a02e4c47cc4e199ce","https://github.com/openssl/openssl/commit/12bc26ffb3a2be728c9b86e1cae277de5b33dfa4","https://github.com/openssl/openssl/commit/3ff64913615d648cfbb6a6f1cf5529ae7ea829d7","https://github.com/openssl/openssl/commit/ab52d88cb5374876d59aee3c91f9e4ccce2b7ce4","https://github.com/openssl/openssl/commit/da26f368732b83e40e9d356fe61c3d3aaab6d2e8","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42766","description":"Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-42766","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-42766","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-42766","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42766","date":"2026-10-27","epss":0.0106,"percentile":0.64367}],"risk":0.318,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42766"},"relatedVulnerabilities":[{"id":"CVE-2026-42766","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42766","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42766","date":"2026-10-27","epss":0.0106,"percentile":0.64367}],"urls":["https://github.com/openssl/openssl/commit/056d06c1918fafbb98c1c85a02e4c47cc4e199ce","https://github.com/openssl/openssl/commit/12bc26ffb3a2be728c9b86e1cae277de5b33dfa4","https://github.com/openssl/openssl/commit/3ff64913615d648cfbb6a6f1cf5529ae7ea829d7","https://github.com/openssl/openssl/commit/ab52d88cb5374876d59aee3c91f9e4ccce2b7ce4","https://github.com/openssl/openssl/commit/da26f368732b83e40e9d356fe61c3d3aaab6d2e8","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42766","description":"Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-1299","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-1299","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-1299","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3","3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.3"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-04-10","kind":"first-observed","version":"3.10.20"},{"date":"2026-04-10","kind":"first-observed","version":"3.11.15"},{"date":"2026-04-10","kind":"first-observed","version":"3.12.13"},{"date":"2026-03-03","kind":"first-observed","version":"3.13.12"},{"date":"2026-03-03","kind":"first-observed","version":"3.14.3"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1299","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-1299","date":"2026-10-27","epss":0.00573,"percentile":0.47174}],"risk":0.31515000000000004,"urls":["https://cve.org/CVERecord?id=CVE-2024-6923","https://github.com/python/cpython/commit/052e55e7d44718fe46cbba0ca995cb8fcc359413","https://github.com/python/cpython/commit/0a925ab591c45d6638f37b5e57796f36fa0e56d8","https://github.com/python/cpython/commit/7877fe424415bc4a13045e62a90a7277413d8cb9","https://github.com/python/cpython/commit/842ce19a0c0b58d61591e8f6a708c38db1fb94e4","https://github.com/python/cpython/commit/8cdf6204f4ae821f32993f8fc6bad0d318f95f36","https://github.com/python/cpython/commit/e417f05ad77a4c30ddc07f99e90fc0cef43e831a","https://github.com/python/cpython/issues/144125","https://github.com/python/cpython/pull/144126","https://mail.python.org/archives/list/security-announce@python.org/thread/6ZZULGALJTITEAGEXLDJE2C6FORDXPBT/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-1299","description":"The \nemail module, specifically the \"BytesGenerator\" class, didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized. This is only applicable if using \"LiteralHeader\" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in \"BytesGenerator\"."},"relatedVulnerabilities":[]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-82560","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-82560","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-10-27","epss":0.0063,"percentile":0.49968}],"risk":0.315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-82560"},"relatedVulnerabilities":[{"id":"CVE-2026-82560","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-10-27","epss":0.0063,"percentile":0.49968}],"urls":["https://github.com/rra/podlators/commit/70510174f69eb54aa6d617bde4e1402cd9b7c61f.patch","https://metacpan.org/release/RRA/podlators-v6.1.0/source/lib/Pod/Text.pm#L245-261","https://metacpan.org/release/RRA/podlators-v6.1.1/changes","http://www.openwall.com/lists/oss-security/2026/09/19/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82560","description":"Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.\n\nEach =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.\n\nFormatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted."}]},{"artifact":{"id":"c1e034c150f7718d","cpes":["cpe:2.3:a:certifi:certifi:2023.7.22:*:*:*:*:python:*:*"],"name":"certifi","purl":"pkg:pypi/certifi@2023.7.22","type":"python","version":"2023.7.22","language":"python","licenses":["MPL-2.0"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/certifi-2023.7.22-py3.11.egg-info/PKG-INFO","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/certifi-2023.7.22-py3.11.egg-info/PKG-INFO","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/certifi-2023.7.22-py3.11.egg-info/installed-files.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/certifi-2023.7.22-py3.11.egg-info/installed-files.txt","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/certifi-2023.7.22-py3.11.egg-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/certifi-2023.7.22-py3.11.egg-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2024.7.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-248v-346w-9cwc","versionConstraint":">=2021.5.30,<2024.7.4 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"certifi","version":"2023.7.22"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-248v-346w-9cwc","fix":{"state":"fixed","versions":["2024.7.4"],"available":[{"date":"2025-02-12","kind":"first-observed","version":"2024.7.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-39689","cwe":"CWE-345","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-39689","cwe":"CWE-345","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-39689","date":"2026-10-27","epss":0.01049,"percentile":0.64069}],"risk":0.3147,"urls":["https://github.com/certifi/python-certifi/security/advisories/GHSA-248v-346w-9cwc","https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463","https://nvd.nist.gov/vuln/detail/CVE-2024-39689","https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI","https://security.netapp.com/advisory/ntap-20241206-0001","https://github.com/pypa/advisory-database/tree/main/vulns/certifi/PYSEC-2024-230.yaml"],"severity":"Low","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-248v-346w-9cwc","description":"Certifi removes GLOBALTRUST root certificate"},"relatedVulnerabilities":[{"id":"CVE-2024-39689","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-39689","cwe":"CWE-345","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-39689","cwe":"CWE-345","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-39689","date":"2026-10-27","epss":0.01049,"percentile":0.64069}],"urls":["https://github.com/certifi/python-certifi/commit/bd8153872e9c6fc98f4023df9c2deaffea2fa463","https://github.com/certifi/python-certifi/security/advisories/GHSA-248v-346w-9cwc","https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/XpknYMPO8dI","https://security.netapp.com/advisory/ntap-20241206-0001/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-39689","description":"Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store. `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified \"long-running and unresolved compliance issues.\""}]},{"artifact":{"id":"95295f44031221db","cpes":["cpe:2.3:a:isaac_muse_\\<isaac_muse_project:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse_project:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_museproject:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_museproject:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse_project:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac-muse-\\<isaac-muse:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac-muse-\\<isaac-muse:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_museproject:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python-soupsieve:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python-soupsieve:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python_soupsieve:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python_soupsieve:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac-muse-\\<isaac-muse:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python-soupsieve:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python_soupsieve:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:soupsieve:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:soupsieve:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:soupsieve:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python:soupsieve:2.5:*:*:*:*:*:*:*"],"name":"soupsieve","purl":"pkg:pypi/soupsieve@2.5","type":"python","version":"2.5","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.9.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gjv8-xp57-g29c","versionConstraint":"<2.9.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"soupsieve","version":"2.5"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-gjv8-xp57-g29c","fix":{"state":"fixed","versions":["2.9.0"],"available":[{"date":"2026-09-18","kind":"first-observed","version":"2.9.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86000","cwe":"CWE-400","type":"Primary","source":"security-advisories@github.com"},{"cve":"CVE-2026-86000","cwe":"CWE-1333","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-86000","date":"2026-10-27","epss":0.00609,"percentile":0.48941}],"risk":0.313635,"urls":["https://github.com/facelessuser/soupsieve/security/advisories/GHSA-gjv8-xp57-g29c","https://nvd.nist.gov/vuln/detail/CVE-2026-86000","https://github.com/facelessuser/soupsieve/commit/ce44e4996e6632871c18cdd7a7fb641be8ef34ef","https://github.com/facelessuser/soupsieve/releases/tag/2.9"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gjv8-xp57-g29c","description":"Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns"},"relatedVulnerabilities":[{"id":"CVE-2026-86000","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86000","cwe":"CWE-400","type":"Primary","source":"security-advisories@github.com"},{"cve":"CVE-2026-86000","cwe":"CWE-1333","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-86000","date":"2026-10-27","epss":0.00609,"percentile":0.48941}],"urls":["https://github.com/facelessuser/soupsieve/commit/ce44e4996e6632871c18cdd7a7fb641be8ef34ef","https://github.com/facelessuser/soupsieve/releases/tag/2.9","https://github.com/facelessuser/soupsieve/security/advisories/GHSA-gjv8-xp57-g29c"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86000","description":"Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, the selector parser in src/soupsieve/css_parser.py defines IDENTIFIER with adjacent quantified groups over overlapping character classes, and VALUE embeds IDENTIFIER for attribute selectors. When an attacker-controlled selector contains a long identifier or unquoted attribute-value run followed by input that makes the overall match fail, the regular expression engine explores quadratically many splits between the overlapping groups. User-controlled selectors can reach this path through soupsieve.compile(), soupsieve.select(), or BeautifulSoup.select(), while applications using only hard-coded selectors are unaffected. The resulting CPU consumption can hold the Python GIL, exhaust application workers, and stall a service; successful plain identifier matches are linear, and the issue does not cause memory corruption or code execution. The issue is fixed in version 2.9."}]},{"artifact":{"id":"95295f44031221db","cpes":["cpe:2.3:a:isaac_muse_\\<isaac_muse_project:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse_project:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_museproject:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_museproject:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse_project:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac-muse-\\<isaac-muse:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac-muse-\\<isaac-muse:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_museproject:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python-soupsieve:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python-soupsieve:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python_soupsieve:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python_soupsieve:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac-muse-\\<isaac-muse:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:isaac_muse_\\<isaac_muse:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python-soupsieve:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python_soupsieve:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:soupsieve:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:soupsieve:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python:python-soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python:python_soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:soupsieve:soupsieve:2.5:*:*:*:*:*:*:*","cpe:2.3:a:python:soupsieve:2.5:*:*:*:*:*:*:*"],"name":"soupsieve","purl":"pkg:pypi/soupsieve@2.5","type":"python","version":"2.5","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/soupsieve-2.5.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.9.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j934-xhv5-fg8f","versionConstraint":"<2.9.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"soupsieve","version":"2.5"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-j934-xhv5-fg8f","fix":{"state":"fixed","versions":["2.9.0"],"available":[{"date":"2026-09-18","kind":"first-observed","version":"2.9.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85999","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-85999","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-85999","date":"2026-10-27","epss":0.00609,"percentile":0.48941}],"risk":0.313635,"urls":["https://github.com/facelessuser/soupsieve/security/advisories/GHSA-j934-xhv5-fg8f","https://nvd.nist.gov/vuln/detail/CVE-2026-85999","https://github.com/facelessuser/soupsieve/commit/cf198fcddc9230f06ed39f974eba0ce076b85cda","https://github.com/facelessuser/soupsieve/releases/tag/2.9"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j934-xhv5-fg8f","description":"Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)"},"relatedVulnerabilities":[{"id":"CVE-2026-85999","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85999","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-85999","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-85999","date":"2026-10-27","epss":0.00609,"percentile":0.48941}],"urls":["https://github.com/facelessuser/soupsieve/commit/cf198fcddc9230f06ed39f974eba0ce076b85cda","https://github.com/facelessuser/soupsieve/releases/tag/2.9","https://github.com/facelessuser/soupsieve/security/advisories/GHSA-j934-xhv5-fg8f"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-85999","description":"Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.9, selector_iter in src/soupsieve/css_parser.py trims the raw selector with RE_WS_END, an end-anchored WSC whitespace-and-comment expression used with search(), so the regular expression engine retries a greedy scan at every starting offset. An attacker-controlled valid selector containing a long internal whitespace run, or a selector containing a long CSS comment run followed by another token, causes quadratic CPU work before tokenization. User-controlled selectors can reach the path through soupsieve.compile() and BeautifulSoup.select(), while applications using only hard-coded selectors are unaffected. This root cause is separate from the IDENTIFIER and VALUE backtracking vulnerability because the cost occurs in RE_WS_END.search during trimming rather than token matching. The resulting CPU consumption can hold the Python GIL, exhaust workers, and stall a service without causing memory corruption or code execution. The issue is fixed in version 2.9."}]},{"artifact":{"id":"c08fe2fe58d4c369","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyterlab:4.0.7:*:*:*:*:*:*:*"],"name":"jupyterlab","purl":"pkg:pypi/jupyterlab@4.0.7","type":"python","version":"4.0.7","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.2.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9q39-rmj3-p4r2","versionConstraint":">=4.0.0,<=4.2.4 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyterlab","version":"4.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-9q39-rmj3-p4r2","fix":{"state":"fixed","versions":["4.2.5"],"available":[{"date":"2024-08-30","kind":"first-observed","version":"4.2.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":8.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-43805","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-43805","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-43805","date":"2026-10-27","epss":0.00399,"percentile":0.3398}],"risk":0.3132149999999999,"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-9q39-rmj3-p4r2","https://nvd.nist.gov/vuln/detail/CVE-2024-43805","https://github.com/jupyterlab/jupyterlab/commit/06ad9de836f155add7d3d651ef936cc4c5ea8093","https://github.com/jupyterlab/jupyterlab/commit/88e24baac551196f9cb3de16bd060a7ab1597674"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9q39-rmj3-p4r2","description":"HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering"},"relatedVulnerabilities":[{"id":"CVE-2024-43805","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-43805","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-43805","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-43805","date":"2026-10-27","epss":0.00399,"percentile":0.3398}],"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-9q39-rmj3-p4r2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-43805","description":"jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. JupyterLab v3.6.8, v4.2.5 and Jupyter Notebook v7.2.2 have been patched to resolve this issue. Users are advised to upgrade. There is no workaround for the underlying DOM Clobbering susceptibility. However, select plugins can be disabled on deployments which cannot update in a timely fashion to minimise the risk. These are: 1. `@jupyterlab/mathjax-extension:plugin` - users will loose ability to preview mathematical equations. 2. `@jupyterlab/markdownviewer-extension:plugin` - users will loose ability to open Markdown previews. 3. `@jupyterlab/mathjax2-extension:plugin` (if installed with optional `jupyterlab-mathjax2` package) - an older version of the mathjax plugin for JupyterLab 4.x. To disable these extensions run: ```jupyter labextension disable @jupyterlab/markdownviewer-extension:plugin && jupyter labextension disable @jupyterlab/mathjax-extension:plugin && jupyter labextension disable @jupyterlab/mathjax2-extension:plugin ``` in bash."}]},{"artifact":{"id":"01853ae3313818ca","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:notebook:7.0.6:*:*:*:*:*:*:*"],"name":"notebook","purl":"pkg:pypi/notebook@7.0.6","type":"python","version":"7.0.6","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.2.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9q39-rmj3-p4r2","versionConstraint":">=7.0.0,<=7.2.1 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"notebook","version":"7.0.6"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-9q39-rmj3-p4r2","fix":{"state":"fixed","versions":["7.2.2"],"available":[{"date":"2024-08-30","kind":"first-observed","version":"7.2.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":8.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-43805","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-43805","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-43805","date":"2026-10-27","epss":0.00399,"percentile":0.3398}],"risk":0.3132149999999999,"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-9q39-rmj3-p4r2","https://nvd.nist.gov/vuln/detail/CVE-2024-43805","https://github.com/jupyterlab/jupyterlab/commit/06ad9de836f155add7d3d651ef936cc4c5ea8093","https://github.com/jupyterlab/jupyterlab/commit/88e24baac551196f9cb3de16bd060a7ab1597674"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9q39-rmj3-p4r2","description":"HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering"},"relatedVulnerabilities":[{"id":"CVE-2024-43805","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-43805","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-43805","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-43805","date":"2026-10-27","epss":0.00399,"percentile":0.3398}],"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-9q39-rmj3-p4r2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-43805","description":"jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. JupyterLab v3.6.8, v4.2.5 and Jupyter Notebook v7.2.2 have been patched to resolve this issue. Users are advised to upgrade. There is no workaround for the underlying DOM Clobbering susceptibility. However, select plugins can be disabled on deployments which cannot update in a timely fashion to minimise the risk. These are: 1. `@jupyterlab/mathjax-extension:plugin` - users will loose ability to preview mathematical equations. 2. `@jupyterlab/markdownviewer-extension:plugin` - users will loose ability to open Markdown previews. 3. `@jupyterlab/mathjax2-extension:plugin` (if installed with optional `jupyterlab-mathjax2` package) - an older version of the mathjax plugin for JupyterLab 4.x. To disable these extensions run: ```jupyter labextension disable @jupyterlab/markdownviewer-extension:plugin && jupyter labextension disable @jupyterlab/mathjax-extension:plugin && jupyter labextension disable @jupyterlab/mathjax2-extension:plugin ``` in bash."}]},{"artifact":{"id":"b635485d53d5cd3f","cpes":["cpe:2.3:a:libncurses6:libncurses6:6.3-2ubuntu0.1:*:*:*:*:*:*:*"],"name":"libncurses6","purl":"pkg:deb/ubuntu/libncurses6@6.3-2ubuntu0.1?arch=amd64&distro=ubuntu-22.04&upstream=ncurses","type":"deb","version":"6.3-2ubuntu0.1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtinfo6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libncurses6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libncurses6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libncurses6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"ncurses","version":"6.3-2ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-27","epss":0.01037,"percentile":0.63741}],"risk":0.3111,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-50495"},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-27","epss":0.01037,"percentile":0.63741}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"f04802cda5fff11d","cpes":["cpe:2.3:a:libncursesw6:libncursesw6:6.3-2ubuntu0.1:*:*:*:*:*:*:*"],"name":"libncursesw6","purl":"pkg:deb/ubuntu/libncursesw6@6.3-2ubuntu0.1?arch=amd64&distro=ubuntu-22.04&upstream=ncurses","type":"deb","version":"6.3-2ubuntu0.1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtinfo6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libncursesw6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libncursesw6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libncursesw6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"ncurses","version":"6.3-2ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-27","epss":0.01037,"percentile":0.63741}],"risk":0.3111,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-50495"},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-27","epss":0.01037,"percentile":0.63741}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"8523f7e9cbd5d4fb","cpes":["cpe:2.3:a:libtinfo6:libtinfo6:6.3-2ubuntu0.1:*:*:*:*:*:*:*"],"name":"libtinfo6","purl":"pkg:deb/ubuntu/libtinfo6@6.3-2ubuntu0.1?arch=amd64&distro=ubuntu-22.04&upstream=ncurses","type":"deb","version":"6.3-2ubuntu0.1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtinfo6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libtinfo6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtinfo6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libtinfo6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"ncurses","version":"6.3-2ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-27","epss":0.01037,"percentile":0.63741}],"risk":0.3111,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-50495"},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-27","epss":0.01037,"percentile":0.63741}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"834d85bcb22efc52","cpes":["cpe:2.3:a:ncurses-base:ncurses-base:6.3-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-base:ncurses_base:6.3-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses-base:6.3-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses_base:6.3-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-base:6.3-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_base:6.3-2ubuntu0.1:*:*:*:*:*:*:*"],"name":"ncurses-base","purl":"pkg:deb/ubuntu/ncurses-base@6.3-2ubuntu0.1?arch=all&distro=ubuntu-22.04&upstream=ncurses","type":"deb","version":"6.3-2ubuntu0.1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/ncurses-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/ncurses-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-base.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/ncurses-base.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/ncurses-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/ncurses-base.list"}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"ncurses","version":"6.3-2ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-27","epss":0.01037,"percentile":0.63741}],"risk":0.3111,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-50495"},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-27","epss":0.01037,"percentile":0.63741}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"056c0a251d9fbd1d","cpes":["cpe:2.3:a:ncurses-bin:ncurses-bin:6.3-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-bin:ncurses_bin:6.3-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_bin:ncurses-bin:6.3-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_bin:ncurses_bin:6.3-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-bin:6.3-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_bin:6.3-2ubuntu0.1:*:*:*:*:*:*:*"],"name":"ncurses-bin","purl":"pkg:deb/ubuntu/ncurses-bin@6.3-2ubuntu0.1?arch=amd64&distro=ubuntu-22.04&upstream=ncurses","type":"deb","version":"6.3-2ubuntu0.1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/ncurses-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/ncurses-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/ncurses-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/ncurses-bin.list"}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"ncurses","version":"6.3-2ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-27","epss":0.01037,"percentile":0.63741}],"risk":0.3111,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-50495"},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-27","epss":0.01037,"percentile":0.63741}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"9487810cf2b0ac44","cpes":["cpe:2.3:a:gcc-12-base:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc-12-base:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc_12_base:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc_12_base:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc-12:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc-12:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc_12:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc_12:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*"],"name":"gcc-12-base","purl":"pkg:deb/ubuntu/gcc-12-base@12.3.0-1ubuntu1~22.04?arch=amd64&distro=ubuntu-22.04&upstream=gcc-12","type":"deb","version":"12.3.0-1ubuntu1~22.04","language":"","licenses":["sha256:da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-12-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/gcc-12-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gcc-12-base:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/gcc-12-base:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-12"}]},"matchDetails":[{"fix":{"suggestedVersion":"12.3.0-1ubuntu1~22.04.2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4039","versionConstraint":"< 12.3.0-1ubuntu1~22.04.2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gcc-12","version":"12.3.0-1ubuntu1~22.04"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-4039","fix":{"state":"fixed","versions":["12.3.0-1ubuntu1~22.04.2"],"available":[{"date":"2025-08-19","kind":"advisory","version":"12.3.0-1ubuntu1~22.04.2"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4039","cwe":"CWE-693","type":"Secondary","source":"arm-security@arm.com"},{"cve":"CVE-2023-4039","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4039","date":"2026-10-27","epss":0.01036,"percentile":0.63726}],"risk":0.31079999999999997,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4039"},"relatedVulnerabilities":[{"id":"CVE-2023-4039","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"arm-security@arm.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4039","cwe":"CWE-693","type":"Secondary","source":"arm-security@arm.com"},{"cve":"CVE-2023-4039","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4039","date":"2026-10-27","epss":0.01036,"percentile":0.63726}],"urls":["https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64","https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf","https://cert-portal.siemens.com/productcert/html/ssa-355557.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4039","description":"**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \noverflow in dynamically-sized local variables in your application \nwithout this being detected. This stack-protector failure only applies \nto C99-style dynamically-sized local variables or those created using \nalloca(). The stack-protector operates as intended for statically-sized \nlocal variables.\n\nThe default behavior when the stack-protector \ndetects an overflow is to terminate your application, resulting in \ncontrolled loss of availability. An attacker who can exploit a buffer \noverflow without triggering the stack-protector might be able to change \nprogram flow control to cause an uncontrolled loss of availability or to\n go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself."}]},{"artifact":{"id":"0167188753744b50","cpes":["cpe:2.3:a:libgcc-s1:libgcc-s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-s1:libgcc_s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_s1:libgcc-s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_s1:libgcc_s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc-s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc_s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*"],"name":"libgcc-s1","purl":"pkg:deb/ubuntu/libgcc-s1@12.3.0-1ubuntu1~22.04?arch=amd64&distro=ubuntu-22.04&upstream=gcc-12","type":"deb","version":"12.3.0-1ubuntu1~22.04","language":"","licenses":["sha256:da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-12-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgcc-s1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgcc-s1:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgcc-s1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-12"}]},"matchDetails":[{"fix":{"suggestedVersion":"12.3.0-1ubuntu1~22.04.2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4039","versionConstraint":"< 12.3.0-1ubuntu1~22.04.2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gcc-12","version":"12.3.0-1ubuntu1~22.04"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-4039","fix":{"state":"fixed","versions":["12.3.0-1ubuntu1~22.04.2"],"available":[{"date":"2025-08-19","kind":"advisory","version":"12.3.0-1ubuntu1~22.04.2"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4039","cwe":"CWE-693","type":"Secondary","source":"arm-security@arm.com"},{"cve":"CVE-2023-4039","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4039","date":"2026-10-27","epss":0.01036,"percentile":0.63726}],"risk":0.31079999999999997,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4039"},"relatedVulnerabilities":[{"id":"CVE-2023-4039","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"arm-security@arm.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4039","cwe":"CWE-693","type":"Secondary","source":"arm-security@arm.com"},{"cve":"CVE-2023-4039","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4039","date":"2026-10-27","epss":0.01036,"percentile":0.63726}],"urls":["https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64","https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf","https://cert-portal.siemens.com/productcert/html/ssa-355557.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4039","description":"**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \noverflow in dynamically-sized local variables in your application \nwithout this being detected. This stack-protector failure only applies \nto C99-style dynamically-sized local variables or those created using \nalloca(). The stack-protector operates as intended for statically-sized \nlocal variables.\n\nThe default behavior when the stack-protector \ndetects an overflow is to terminate your application, resulting in \ncontrolled loss of availability. An attacker who can exploit a buffer \noverflow without triggering the stack-protector might be able to change \nprogram flow control to cause an uncontrolled loss of availability or to\n go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself."}]},{"artifact":{"id":"0f7f38aaf7f6551a","cpes":["cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*"],"name":"libstdc++6","purl":"pkg:deb/ubuntu/libstdc%2B%2B6@12.3.0-1ubuntu1~22.04?arch=amd64&distro=ubuntu-22.04&upstream=gcc-12","type":"deb","version":"12.3.0-1ubuntu1~22.04","language":"","licenses":["sha256:da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-12-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libstdc++6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libstdc++6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libstdc++6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-12"}]},"matchDetails":[{"fix":{"suggestedVersion":"12.3.0-1ubuntu1~22.04.2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4039","versionConstraint":"< 12.3.0-1ubuntu1~22.04.2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gcc-12","version":"12.3.0-1ubuntu1~22.04"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-4039","fix":{"state":"fixed","versions":["12.3.0-1ubuntu1~22.04.2"],"available":[{"date":"2025-08-19","kind":"advisory","version":"12.3.0-1ubuntu1~22.04.2"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4039","cwe":"CWE-693","type":"Secondary","source":"arm-security@arm.com"},{"cve":"CVE-2023-4039","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4039","date":"2026-10-27","epss":0.01036,"percentile":0.63726}],"risk":0.31079999999999997,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4039"},"relatedVulnerabilities":[{"id":"CVE-2023-4039","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"arm-security@arm.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4039","cwe":"CWE-693","type":"Secondary","source":"arm-security@arm.com"},{"cve":"CVE-2023-4039","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4039","date":"2026-10-27","epss":0.01036,"percentile":0.63726}],"urls":["https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64","https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-x7ch-h5rf-w2mf","https://cert-portal.siemens.com/productcert/html/ssa-355557.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4039","description":"**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \noverflow in dynamically-sized local variables in your application \nwithout this being detected. This stack-protector failure only applies \nto C99-style dynamically-sized local variables or those created using \nalloca(). The stack-protector operates as intended for statically-sized \nlocal variables.\n\nThe default behavior when the stack-protector \ndetects an overflow is to terminate your application, resulting in \ncontrolled loss of availability. An attacker who can exploit a buffer \noverflow without triggering the stack-protector might be able to change \nprogram flow control to cause an uncontrolled loss of availability or to\n go further and affect confidentiality or integrity. NOTE: The GCC project argues that this is a missed hardening bug and not a vulnerability by itself."}]},{"artifact":{"id":"3a15d49164391229","cpes":["cpe:2.3:a:jupyter:nbconvert:7.9.2:*:*:*:*:python:*:*"],"name":"nbconvert","purl":"pkg:pypi/nbconvert@7.9.2","type":"python","version":"7.9.2","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/nbconvert-7.9.2.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/nbconvert-7.9.2.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/nbconvert-7.9.2.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/nbconvert-7.9.2.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/nbconvert-7.9.2.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/nbconvert-7.9.2.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.17.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-pjvx-prjx-h659","versionConstraint":">=5.4.0,<=7.17.1 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"nbconvert","version":"7.9.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-pjvx-prjx-h659","fix":{"state":"fixed","versions":["7.17.2"],"available":[{"date":"2026-10-23","kind":"first-observed","version":"7.17.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","metrics":{"baseScore":8.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114140","cwe":"CWE-22","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-114140","date":"2026-10-27","epss":0.00381,"percentile":0.31946}],"risk":0.310515,"urls":["https://github.com/jupyter/nbconvert/security/advisories/GHSA-pjvx-prjx-h659","https://nvd.nist.gov/vuln/detail/CVE-2026-114140","https://github.com/jupyter/nbconvert/commit/ce4bd99aec31d81d759fa8eeb8643179392ec66f","https://github.com/jupyter/nbconvert/releases/tag/v7.17.2"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-pjvx-prjx-h659","description":"nbconvert: Arbitrary file write through path traversal in cell output filenames when exporting to md, latex, rst and asciidoc"},"relatedVulnerabilities":[{"id":"CVE-2026-114140","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114140","cwe":"CWE-22","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-114140","date":"2026-10-27","epss":0.00381,"percentile":0.31946}],"urls":["https://github.com/jupyter/nbconvert/commit/ce4bd99aec31d81d759fa8eeb8643179392ec66f","https://github.com/jupyter/nbconvert/releases/tag/v7.17.2","https://github.com/jupyter/nbconvert/security/advisories/GHSA-pjvx-prjx-h659"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114140","description":"The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/preprocessors/extractoutput.py joins the attacker-controlled cell output metadata filename to output_files_dir without limiting the result to the intended directory. When a victim converts a malicious notebook with the markdown, LaTeX, reStructuredText, or AsciiDoc exporter, path traversal in the output filename can write attacker-controlled output data to arbitrary locations accessible to the victim. Running the notebook cell again replaces the malicious output metadata, but merely converting the supplied notebook does not. This issue is fixed in version 7.17.2."}]},{"artifact":{"id":"55e157ff0099c55f","cpes":["cpe:2.3:a:gzip:gzip:1.10-4ubuntu4.1:*:*:*:*:*:*:*"],"name":"gzip","purl":"pkg:deb/ubuntu/gzip@1.10-4ubuntu4.1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"1.10-4ubuntu4.1","language":"","licenses":["FSF-manpages","GFDL-1.3+-no-invariant","GFDL-3","GPL-3","GPL-3+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gzip/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/gzip/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gzip.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/gzip.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gzip.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/gzip.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.10-4ubuntu4.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-41992","versionConstraint":"< 1.10-4ubuntu4.2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gzip","version":"1.10-4ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-41992","fix":{"state":"fixed","versions":["1.10-4ubuntu4.2"],"available":[{"date":"2026-07-06","kind":"advisory","version":"1.10-4ubuntu4.2"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-41992","cwe":"CWE-126","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-41992","date":"2026-10-27","epss":0.0062,"percentile":0.49472}],"risk":0.31,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-41992"},"relatedVulnerabilities":[{"id":"CVE-2026-41992","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41992","cwe":"CWE-126","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-41992","date":"2026-10-27","epss":0.0062,"percentile":0.49472}],"urls":["https://cert.pl/en/posts/2026/04/CVE-2026-41991/","https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=63dbf6b3b9e6e781df1a6a64e609b10e23969681","https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=e7378c2d421be6a286922374425680bbe9ad8b7d","https://www.gnu.org/software/gzip/","http://www.openwall.com/lists/oss-security/2026/08/23/1","http://www.openwall.com/lists/oss-security/2026/08/25/1","http://www.openwall.com/lists/oss-security/2026/08/27/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-41992","description":"GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation.\nBy decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out‑of‑bounds read in the LZH decoder. The LZH decompression logic follows stale values left in the shared array, causing reads past the end of the allocated global buffer.\n\nThis issue has been fixed in commits 63dbf6b3b9e6e781df1a6a64e609b10e23969681 and e7378c2d421be6a286922374425680bbe9ad8b7d."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.13"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0915","versionConstraint":"< 2.35-0ubuntu3.13 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-0915","fix":{"state":"fixed","versions":["2.35-0ubuntu3.13"],"available":[{"date":"2026-02-03","kind":"advisory","version":"2.35-0ubuntu3.13"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-27","epss":0.00618,"percentile":0.49409}],"risk":0.309,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0915"},"relatedVulnerabilities":[{"id":"CVE-2026-0915","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-27","epss":0.00618,"percentile":0.49409}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33802","http://www.openwall.com/lists/oss-security/2026/01/16/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0915","description":"Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.13"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0915","versionConstraint":"< 2.35-0ubuntu3.13 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-0915","fix":{"state":"fixed","versions":["2.35-0ubuntu3.13"],"available":[{"date":"2026-02-03","kind":"advisory","version":"2.35-0ubuntu3.13"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-27","epss":0.00618,"percentile":0.49409}],"risk":0.309,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0915"},"relatedVulnerabilities":[{"id":"CVE-2026-0915","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-27","epss":0.00618,"percentile":0.49409}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33802","http://www.openwall.com/lists/oss-security/2026/01/16/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0915","description":"Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.13"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0915","versionConstraint":"< 2.35-0ubuntu3.13 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-0915","fix":{"state":"fixed","versions":["2.35-0ubuntu3.13"],"available":[{"date":"2026-02-03","kind":"advisory","version":"2.35-0ubuntu3.13"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-27","epss":0.00618,"percentile":0.49409}],"risk":0.309,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0915"},"relatedVulnerabilities":[{"id":"CVE-2026-0915","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-27","epss":0.00618,"percentile":0.49409}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33802","http://www.openwall.com/lists/oss-security/2026/01/16/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0915","description":"Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver."}]},{"artifact":{"id":"c08fe2fe58d4c369","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:jupyterlab:jupyterlab:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyterlab:4.0.7:*:*:*:*:*:*:*"],"name":"jupyterlab","purl":"pkg:pypi/jupyterlab@4.0.7","type":"python","version":"4.0.7","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterlab-4.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.5.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mqcg-5x36-vfcg","versionConstraint":"<=4.5.6 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyterlab","version":"4.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-mqcg-5x36-vfcg","fix":{"state":"fixed","versions":["4.5.7"],"available":[{"date":"2026-05-07","kind":"first-observed","version":"4.5.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42557","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-42557","cwe":"CWE-79","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42557","date":"2026-10-27","epss":0.00371,"percentile":0.30845}],"risk":0.30793000000000004,"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-mqcg-5x36-vfcg","https://jupyterlab.readthedocs.io/en/latest/user/commands.html#commands-in-markdown-files","https://nvd.nist.gov/vuln/detail/CVE-2026-42557"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mqcg-5x36-vfcg","description":"JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content"},"relatedVulnerabilities":[{"id":"CVE-2026-42557","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42557","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-42557","cwe":"CWE-79","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42557","date":"2026-10-27","epss":0.00371,"percentile":0.30845}],"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-mqcg-5x36-vfcg","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/security/cve/CVE-2026-42557","https://bugzilla.redhat.com/show_bug.cgi?id=2477086","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42557.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42557","description":"jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and executes the named command without checking whether the element came from trusted JupyterLab UI. A notebook with a pre-saved HTML cell output containing a deceptive button can trigger arbitrary JupyterLab commands - including arbitrary code execution - on a single user click, without any code being submitted for execution by the user. This vulnerability is fixed in 4.5.7."}]},{"artifact":{"id":"01853ae3313818ca","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python-notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python_notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python-notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python_notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:notebook:notebook:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:python:notebook:7.0.6:*:*:*:*:*:*:*"],"name":"notebook","purl":"pkg:pypi/notebook@7.0.6","type":"python","version":"7.0.6","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/notebook-7.0.6.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mqcg-5x36-vfcg","versionConstraint":">=7.0.0,<=7.5.5 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"notebook","version":"7.0.6"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-mqcg-5x36-vfcg","fix":{"state":"fixed","versions":["7.5.6"],"available":[{"date":"2026-05-07","kind":"first-observed","version":"7.5.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42557","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-42557","cwe":"CWE-79","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42557","date":"2026-10-27","epss":0.00371,"percentile":0.30845}],"risk":0.30793000000000004,"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-mqcg-5x36-vfcg","https://jupyterlab.readthedocs.io/en/latest/user/commands.html#commands-in-markdown-files","https://nvd.nist.gov/vuln/detail/CVE-2026-42557"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mqcg-5x36-vfcg","description":"JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content"},"relatedVulnerabilities":[{"id":"CVE-2026-42557","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42557","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-42557","cwe":"CWE-79","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42557","date":"2026-10-27","epss":0.00371,"percentile":0.30845}],"urls":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-mqcg-5x36-vfcg","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/security/cve/CVE-2026-42557","https://bugzilla.redhat.com/show_bug.cgi?id=2477086","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42557.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42557","description":"jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and executes the named command without checking whether the element came from trusted JupyterLab UI. A notebook with a pre-saved HTML cell output containing a deceptive button can trigger arbitrary JupyterLab commands - including arbitrary code execution - on a single user click, without any code being submitted for execution by the user. This vulnerability is fixed in 4.5.7."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-34180","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-34180","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-34180","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34180","date":"2026-10-27","epss":0.01025,"percentile":0.63411}],"risk":0.3075,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34180"},"relatedVulnerabilities":[{"id":"CVE-2026-34180","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34180","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34180","date":"2026-10-27","epss":0.01025,"percentile":0.63411}],"urls":["https://github.com/openssl/openssl/commit/1c6908e4fa5fa568752221d8eaf561a809751e5d","https://github.com/openssl/openssl/commit/cbe418ae978539cf14a398a207dba834c0e93e83","https://github.com/openssl/openssl/commit/d93853c42110d6319e3df07842b488cb9f7ac5ff","https://github.com/openssl/openssl/commit/da5d62af75f69d6fbf7803743d7c56ac75461e43","https://github.com/openssl/openssl/commit/f696c73c3e61b8c502d040af62e690c060908a16","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34180","description":"Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer.  More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL's ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL's own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-34180","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-34180","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-34180","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34180","date":"2026-10-27","epss":0.01025,"percentile":0.63411}],"risk":0.3075,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34180"},"relatedVulnerabilities":[{"id":"CVE-2026-34180","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34180","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34180","date":"2026-10-27","epss":0.01025,"percentile":0.63411}],"urls":["https://github.com/openssl/openssl/commit/1c6908e4fa5fa568752221d8eaf561a809751e5d","https://github.com/openssl/openssl/commit/cbe418ae978539cf14a398a207dba834c0e93e83","https://github.com/openssl/openssl/commit/d93853c42110d6319e3df07842b488cb9f7ac5ff","https://github.com/openssl/openssl/commit/da5d62af75f69d6fbf7803743d7c56ac75461e43","https://github.com/openssl/openssl/commit/f696c73c3e61b8c502d040af62e690c060908a16","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34180","description":"Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer.  More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL's ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL's own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"c3b53ca70a359f02","cpes":["cpe:2.3:a:cryptography.io:cryptography:41.0.4:*:*:*:*:python:*:*","cpe:2.3:a:cryptography.io:cryptography:41.0.4:*:*:*:*:*:*:*"],"name":"cryptography","purl":"pkg:pypi/cryptography@41.0.4","type":"python","version":"41.0.4","language":"python","licenses":["Apache-2.0 OR BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/cryptography-41.0.4.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"46.0.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-r6ph-v2qm-q3c2","versionConstraint":"<=46.0.4 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"cryptography","version":"41.0.4"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-r6ph-v2qm-q3c2","fix":{"state":"fixed","versions":["46.0.5"],"available":[{"date":"2026-02-11","kind":"first-observed","version":"46.0.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26007","cwe":"CWE-345","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-26007","cwe":"CWE-354","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-26007","date":"2026-10-27","epss":0.0039,"percentile":0.32897}],"risk":0.30615,"urls":["https://github.com/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2","https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c","https://github.com/pyca/cryptography/releases/tag/46.0.5","https://nvd.nist.gov/vuln/detail/CVE-2026-26007","http://www.openwall.com/lists/oss-security/2026/02/10/4"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-r6ph-v2qm-q3c2","description":"cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves"},"relatedVulnerabilities":[{"id":"CVE-2026-26007","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26007","cwe":"CWE-345","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-26007","cwe":"CWE-354","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-26007","date":"2026-10-27","epss":0.0039,"percentile":0.32897}],"urls":["https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c","https://github.com/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2","http://www.openwall.com/lists/oss-security/2026/02/10/4","https://access.redhat.com/errata/RHSA-2026:10184","https://access.redhat.com/errata/RHSA-2026:12176","https://access.redhat.com/errata/RHSA-2026:13512","https://access.redhat.com/errata/RHSA-2026:13545","https://access.redhat.com/errata/RHSA-2026:13553","https://access.redhat.com/errata/RHSA-2026:13672","https://access.redhat.com/errata/RHSA-2026:19355","https://access.redhat.com/errata/RHSA-2026:21431","https://access.redhat.com/errata/RHSA-2026:21517","https://access.redhat.com/errata/RHSA-2026:22330","https://access.redhat.com/errata/RHSA-2026:22993","https://access.redhat.com/errata/RHSA-2026:2694","https://access.redhat.com/errata/RHSA-2026:5168","https://access.redhat.com/errata/RHSA-2026:5665","https://access.redhat.com/errata/RHSA-2026:6308","https://access.redhat.com/errata/RHSA-2026:6309","https://access.redhat.com/errata/RHSA-2026:6497","https://access.redhat.com/errata/RHSA-2026:6567","https://access.redhat.com/errata/RHSA-2026:6568","https://access.redhat.com/errata/RHSA-2026:7295","https://access.redhat.com/security/cve/CVE-2026-26007","https://bugzilla.redhat.com/show_bug.cgi?id=2438762","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26007.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-26007","description":"cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() and load_pem_public_key() functions do not verify that the point belongs to the expected prime-order subgroup of the curve. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor > 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it's easy to forge signatures on the small subgroup. Only SECT curves are impacted by this. This vulnerability is fixed in 46.0.5."}]},{"artifact":{"id":"b45b4832d770f70d","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter_server:2.8.0:*:*:*:*:*:*:*"],"name":"jupyter-server","purl":"pkg:pypi/jupyter-server@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.21.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c3mw-737p-c7g2","versionConstraint":"<=2.20.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyter-server","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-c3mw-737p-c7g2","fix":{"state":"fixed","versions":["2.21.0"],"available":[{"date":"2026-09-18","kind":"first-observed","version":"2.21.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.1,"impactScore":5.9,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86049","cwe":"CWE-532","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-86049","date":"2026-10-27","epss":0.00416,"percentile":0.35686}],"risk":0.30367999999999995,"urls":["https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-c3mw-737p-c7g2","https://github.com/jupyter-server/jupyter_server/pull/1681","https://github.com/jupyter-server/jupyter_server/commit/52513529af7096e622c00911b17627b266294717","https://github.com/jupyter-server/jupyter_server/releases/tag/v2.21.0"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c3mw-737p-c7g2","description":"Jupyter Server: 5xx request logging leaks token-bearing Referer header values"},"relatedVulnerabilities":[{"id":"CVE-2026-86049","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.1,"impactScore":5.9,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86049","cwe":"CWE-532","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-86049","date":"2026-10-27","epss":0.00416,"percentile":0.35686}],"urls":["https://github.com/jupyter-server/jupyter_server/commit/52513529af7096e622c00911b17627b266294717","https://github.com/jupyter-server/jupyter_server/pull/1681","https://github.com/jupyter-server/jupyter_server/releases/tag/v2.21.0","https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-c3mw-737p-c7g2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86049","description":"Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyter_server/log.py copies the Referer header into a JSON header block without applying the token scrubbing used for the request URI. A request that returns HTTP 500 while the Referer contains a token-bearing URL can therefore write that token to server logs in plaintext. An attacker who can read those logs can recover the token and use the affected user's Jupyter Server permissions. This issue is fixed in version 2.21.0."}]},{"artifact":{"id":"fd33bcffbac145b9","cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:generic/krb5@1.21.2","type":"binary","version":"1.21.2","language":"","licenses":[],"locations":[{"path":"/opt/conda/lib/libkrb5.so.3.3","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libkrb5.so.3.3","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107778","versionConstraint":"<= 1.22.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"package":{"name":"krb5","version":"1.21.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-10-27","epss":0.00424,"percentile":0.36521}],"risk":0.30316,"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"caa129f4dfb84903","cpes":["cpe:2.3:a:armin_ronacher_project:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher_project:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher_project:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:jinja2:3.1.2:*:*:*:*:*:*:*"],"name":"jinja2","purl":"pkg:pypi/jinja2@3.1.2","type":"python","version":"3.1.2","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q2x7-8rv6-6q7h","versionConstraint":"<=3.1.4 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jinja2","version":"3.1.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-q2x7-8rv6-6q7h","fix":{"state":"fixed","versions":["3.1.5"],"available":[{"date":"2024-12-24","kind":"first-observed","version":"3.1.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":5.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56326","cwe":"CWE-693","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-56326","cwe":"CWE-1336","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-56326","date":"2026-10-27","epss":0.00522,"percentile":0.44079}],"risk":0.30276,"urls":["https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h","https://github.com/pallets/jinja/releases/tag/3.1.5","https://nvd.nist.gov/vuln/detail/CVE-2024-56326","https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4","https://lists.debian.org/debian-lts-announce/2025/04/msg00022.html"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q2x7-8rv6-6q7h","description":"Jinja has a sandbox breakout through indirect reference to format method"},"relatedVulnerabilities":[{"id":"CVE-2024-56326","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56326","cwe":"CWE-693","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-56326","cwe":"CWE-1336","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-56326","date":"2026-10-27","epss":0.00522,"percentile":0.44079}],"urls":["https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4","https://github.com/pallets/jinja/releases/tag/3.1.5","https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h","https://lists.debian.org/debian-lts-announce/2025/04/msg00022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-56326","description":"Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to str.format and ensures they don't escape the sandbox. However, it's possible to store a reference to a malicious string's format method, then pass that to a filter that calls it. No such filters are built-in to Jinja, but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox. This vulnerability is fixed in 3.1.5."}]},{"artifact":{"id":"9bfa8bd71796afc6","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40356","versionConstraint":"< 1.19.2-2ubuntu0.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-40356","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.8"],"available":[{"date":"2026-07-22","kind":"advisory","version":"1.19.2-2ubuntu0.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-27","epss":0.00604,"percentile":0.48682}],"risk":0.302,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-40356"},"relatedVulnerabilities":[{"id":"CVE-2026-40356","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-27","epss":0.00604,"percentile":0.48682}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."}]},{"artifact":{"id":"7570e146ba37f512","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40356","versionConstraint":"< 1.19.2-2ubuntu0.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-40356","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.8"],"available":[{"date":"2026-07-22","kind":"advisory","version":"1.19.2-2ubuntu0.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-27","epss":0.00604,"percentile":0.48682}],"risk":0.302,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-40356"},"relatedVulnerabilities":[{"id":"CVE-2026-40356","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-27","epss":0.00604,"percentile":0.48682}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."}]},{"artifact":{"id":"513c46e2da3930be","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40356","versionConstraint":"< 1.19.2-2ubuntu0.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-40356","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.8"],"available":[{"date":"2026-07-22","kind":"advisory","version":"1.19.2-2ubuntu0.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-27","epss":0.00604,"percentile":0.48682}],"risk":0.302,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-40356"},"relatedVulnerabilities":[{"id":"CVE-2026-40356","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-27","epss":0.00604,"percentile":0.48682}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."}]},{"artifact":{"id":"09c4acfd49c598b7","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40356","versionConstraint":"< 1.19.2-2ubuntu0.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-40356","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.8"],"available":[{"date":"2026-07-22","kind":"advisory","version":"1.19.2-2ubuntu0.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-27","epss":0.00604,"percentile":0.48682}],"risk":0.302,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-40356"},"relatedVulnerabilities":[{"id":"CVE-2026-40356","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-27","epss":0.00604,"percentile":0.48682}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-0865","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-0865","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-0865","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3","3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.3"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-04-10","kind":"first-observed","version":"3.10.20"},{"date":"2026-04-10","kind":"first-observed","version":"3.11.15"},{"date":"2026-04-10","kind":"first-observed","version":"3.12.13"},{"date":"2026-03-03","kind":"first-observed","version":"3.13.12"},{"date":"2026-03-03","kind":"first-observed","version":"3.14.3"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0865","cwe":"CWE-74","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-0865","date":"2026-10-27","epss":0.00554,"percentile":0.46087}],"risk":0.30193,"urls":["https://github.com/python/cpython/commit/22e4d55285cee52bc4dbe061324e5f30bd4dee58","https://github.com/python/cpython/commit/23e3c0ae867cca0130e441e776c9955b9027c510","https://github.com/python/cpython/commit/286e3ac39984fe85a17f4ab39c64d382137aae5f","https://github.com/python/cpython/commit/2f840249550e082dc351743f474ba56da10478d2","https://github.com/python/cpython/commit/4802b96a2cde58570c24c13ef3289490980961c5","https://github.com/python/cpython/commit/66da7bf6fe7b81e3ecc9c0a25bd47d4616c8d1a6","https://github.com/python/cpython/commit/83ecd18779f286d872f68bfce175651e407d9fff","https://github.com/python/cpython/commit/8bb044d29310bb05d15086cdaa8bf64867d61a97","https://github.com/python/cpython/commit/bfba660085767f8c2d582134e9d511a85eda04cf","https://github.com/python/cpython/commit/c592227ffb48679af9845a45dbb0875d975bb219","https://github.com/python/cpython/commit/e4846a93ac07a8ae9aa18203af0dd13d6e7a6995","https://github.com/python/cpython/commit/f7fceed79ca1bceae8dbe5ba5bc8928564da7211","https://github.com/python/cpython/issues/143916","https://github.com/python/cpython/pull/143917","https://mail.python.org/archives/list/security-announce@python.org/thread/BJ6QPHNSHJTS3A7CFV6IBMCAP2DWRVNT/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0865","description":"User-controlled header names and values containing newlines can allow injecting HTTP headers."},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-1502","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-1502","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-1502","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.5rc1","3.15.0b1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b1"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.13.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-07-02","kind":"first-observed","version":"3.15.0b1"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1502","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-1502","date":"2026-10-27","epss":0.00562,"percentile":0.46584}],"risk":0.30067,"urls":["https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69","https://github.com/python/cpython/commit/56b7100b04e44ea27989242b176beb8f016b2c53","https://github.com/python/cpython/commit/58703ec1bdd1eb075e8b01a0c427683ce594dd3e","https://github.com/python/cpython/commit/9e071c9b28c17f347f81b388a003d4eeb3c7a8dd","https://github.com/python/cpython/commit/b1cf9016335cb637c5a425032e8274a224f4b2ed","https://github.com/python/cpython/commit/c00c386faa579ad71196d33408644478488e43ec","https://github.com/python/cpython/issues/146211","https://github.com/python/cpython/pull/146212","https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3/","http://www.openwall.com/lists/oss-security/2026/04/11/4"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-1502","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host."},"relatedVulnerabilities":[]},{"artifact":{"id":"9d60751a9fbaf207","cpes":["cpe:2.3:a:python_tornado_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:tornado:6.3.3:*:*:*:*:*:*:*"],"name":"tornado","purl":"pkg:pypi/tornado@6.3.3","type":"python","version":"6.3.3","language":"python","licenses":["Apache-2.0"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"6.5.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qjxf-f2mg-c6mc","versionConstraint":"<=6.5.4 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"tornado","version":"6.3.3"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-qjxf-f2mg-c6mc","fix":{"state":"fixed","versions":["6.5.5"],"available":[{"date":"2026-03-12","kind":"first-observed","version":"6.5.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-31958","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-31958","date":"2026-10-27","epss":0.00381,"percentile":0.31942}],"risk":0.29718,"urls":["https://github.com/tornadoweb/tornado/security/advisories/GHSA-qjxf-f2mg-c6mc","https://nvd.nist.gov/vuln/detail/CVE-2026-31958","https://github.com/tornadoweb/tornado/commit/119a195e290c43ad2d63a2cf012c29d43d6ed839","https://github.com/tornadoweb/tornado/releases/tag/v6.5.5","https://lists.debian.org/debian-lts-announce/2026/04/msg00000.html","https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2026-140.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qjxf-f2mg-c6mc","description":"Tornado is vulnerable to DoS due to too many multipart parts"},"relatedVulnerabilities":[{"id":"CVE-2026-31958","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-31958","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-31958","date":"2026-10-27","epss":0.00381,"percentile":0.31942}],"urls":["https://github.com/tornadoweb/tornado/security/advisories/GHSA-qjxf-f2mg-c6mc","https://lists.debian.org/debian-lts-announce/2026/04/msg00000.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-31958","description":"Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsing occurs synchronously on the main thread, this creates the possibility of denial-of-service due to the cost of parsing very large multipart bodies with many parts. This vulnerability is fixed in 6.5.5."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4802","versionConstraint":"< 2.35-0ubuntu3.10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-4802","fix":{"state":"fixed","versions":["2.35-0ubuntu3.10"],"available":[{"date":"2025-05-28","kind":"advisory","version":"2.35-0ubuntu3.10"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-4802","cwe":"CWE-426","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-4802","date":"2026-10-27","epss":0.00593,"percentile":0.48147}],"risk":0.29650000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4802"},"relatedVulnerabilities":[{"id":"CVE-2025-4802","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4802","cwe":"CWE-426","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-4802","date":"2026-10-27","epss":0.00593,"percentile":0.48147}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32976","https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e","http://www.openwall.com/lists/oss-security/2025/05/16/7","http://www.openwall.com/lists/oss-security/2025/05/17/2","https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4802","description":"Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo)."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4802","versionConstraint":"< 2.35-0ubuntu3.10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-4802","fix":{"state":"fixed","versions":["2.35-0ubuntu3.10"],"available":[{"date":"2025-05-28","kind":"advisory","version":"2.35-0ubuntu3.10"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-4802","cwe":"CWE-426","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-4802","date":"2026-10-27","epss":0.00593,"percentile":0.48147}],"risk":0.29650000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4802"},"relatedVulnerabilities":[{"id":"CVE-2025-4802","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4802","cwe":"CWE-426","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-4802","date":"2026-10-27","epss":0.00593,"percentile":0.48147}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32976","https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e","http://www.openwall.com/lists/oss-security/2025/05/16/7","http://www.openwall.com/lists/oss-security/2025/05/17/2","https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4802","description":"Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo)."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4802","versionConstraint":"< 2.35-0ubuntu3.10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-4802","fix":{"state":"fixed","versions":["2.35-0ubuntu3.10"],"available":[{"date":"2025-05-28","kind":"advisory","version":"2.35-0ubuntu3.10"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-4802","cwe":"CWE-426","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-4802","date":"2026-10-27","epss":0.00593,"percentile":0.48147}],"risk":0.29650000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4802"},"relatedVulnerabilities":[{"id":"CVE-2025-4802","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4802","cwe":"CWE-426","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-4802","date":"2026-10-27","epss":0.00593,"percentile":0.48147}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32976","https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e","http://www.openwall.com/lists/oss-security/2025/05/16/7","http://www.openwall.com/lists/oss-security/2025/05/17/2","https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4802","description":"Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo)."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15282","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15282","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-15282","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3","3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.3"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-04-10","kind":"first-observed","version":"3.10.20"},{"date":"2026-04-10","kind":"first-observed","version":"3.11.15"},{"date":"2026-04-10","kind":"first-observed","version":"3.12.13"},{"date":"2026-03-03","kind":"first-observed","version":"3.13.12"},{"date":"2026-03-03","kind":"first-observed","version":"3.14.3"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15282","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15282","date":"2026-10-27","epss":0.00537,"percentile":0.45074}],"risk":0.29535,"urls":["https://github.com/python/cpython/commit/05356b1cc153108aaf27f3b72ce438af4aa218c0","https://github.com/python/cpython/commit/34d76b00dabde81a793bd06dd8ecb057838c4b38","https://github.com/python/cpython/commit/3f396ca9d7bbe2a50ea6b8c9b27c0082884d9f80","https://github.com/python/cpython/commit/4ed11d3cd288e6b90196a15c5a825a45d318fe47","https://github.com/python/cpython/commit/a35ca3be5842505dab74dc0b90b89cde0405017a","https://github.com/python/cpython/commit/f25509e78e8be6ea73c811ac2b8c928c28841b9f","https://github.com/python/cpython/issues/143925","https://github.com/python/cpython/pull/143926","https://mail.python.org/archives/list/security-announce@python.org/thread/X66HL7SISGJT33J53OHXMZT4DFLMHVKF/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15282","description":"User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype."},"relatedVulnerabilities":[]},{"artifact":{"id":"4bd0adec6e7440e1","cpes":["cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:node.js:*:*","cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:rust:*:*","cpe:2.3:a:isaacs:tar:6.1.15:*:*:*:*:node.js:*:*"],"name":"tar","purl":"pkg:npm/tar@6.1.15","type":"npm","version":"6.1.15","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8qq5-rm4j-mr97","versionConstraint":"<=7.5.2 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"tar","version":"6.1.15"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-8qq5-rm4j-mr97","fix":{"state":"fixed","versions":["7.5.3"],"available":[{"date":"2026-01-17","kind":"first-observed","version":"7.5.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-23745","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-23745","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-23745","date":"2026-10-27","epss":0.00376,"percentile":0.31389}],"risk":0.29516,"urls":["https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97","https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e","https://nvd.nist.gov/vuln/detail/CVE-2026-23745"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8qq5-rm4j-mr97","description":"node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization"},"relatedVulnerabilities":[{"id":"CVE-2026-23745","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.2,"impactScore":6.1,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-23745","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-23745","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-23745","date":"2026-10-27","epss":0.00376,"percentile":0.31389}],"urls":["https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e","https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97","https://access.redhat.com/errata/RHSA-2026:18480","https://access.redhat.com/errata/RHSA-2026:18868","https://access.redhat.com/errata/RHSA-2026:19712","https://access.redhat.com/errata/RHSA-2026:2144","https://access.redhat.com/errata/RHSA-2026:2900","https://access.redhat.com/errata/RHSA-2026:2926","https://access.redhat.com/errata/RHSA-2026:3782","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:6192","https://access.redhat.com/security/cve/CVE-2026-23745","https://bugzilla.redhat.com/show_bug.cgi?id=2430538","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23745.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-23745","description":"node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure behavior). This allows malicious archives to bypass the extraction root restriction, leading to Arbitrary File Overwrite via hardlinks and Symlink Poisoning via absolute symlink targets. This vulnerability is fixed in 7.5.3."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-15806","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-15806","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-15806","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.8","3.15.0rc2"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-02","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-01","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-01","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-01","kind":"first-observed","version":"3.14.8"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0rc2"},{"date":"2026-09-09","kind":"first-observed","version":"3.15.0rc2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15806","cwe":"CWE-319","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-15806","cwe":"CWE-522","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15806","date":"2026-10-27","epss":0.00528,"percentile":0.44529}],"risk":0.29040000000000005,"urls":["https://github.com/python/cpython/commit/641be42bb07921ba0f8bffe228b1dc706b092ef6","https://github.com/python/cpython/commit/851cf9a7142ecbdd39f831055533f58284ad2bcc","https://github.com/python/cpython/commit/95355ee3a8e1d3c3d4858d1973aa42a9b91a2801","https://github.com/python/cpython/commit/a0d023fbd23773e24b35d8368789470e22cda5d8","https://github.com/python/cpython/commit/a2773a34183b7d94a243bb98fd658926cc5348ce","https://github.com/python/cpython/commit/a7bb524fef61f77ede01f660ffbd591e1d5837ce","https://github.com/python/cpython/commit/dac88d8615078c55f1304ea4c7a2d822700d4e5a","https://github.com/python/cpython/issues/155694","https://github.com/python/cpython/pull/155696","https://mail.python.org/archives/list/security-announce@python.org/thread/3OKPE5S75KDNA7FY7AI3PL2MXM2X5RB3/","http://www.openwall.com/lists/oss-security/2026/08/18/3"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15806","description":"The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP redirect or an on-path position) could capture credentials in cleartext. Credentials added for http:// URLs could likewise be sent over https://.\n\nCredential matching is now scoped by URL scheme. Credentials registered with a URL that includes a scheme are only used for requests with the same scheme. Credentials registered with a bare authority (such as example.com or example.com:8080) continue to match any scheme, preserving compatibility with existing code, including proxy authentication.\n\nUsers who cannot upgrade immediately can mitigate by ensuring that applications never make plain http:// requests to hosts for which credentials are registered, for example by not following redirects to http:// URLs."},"relatedVulnerabilities":[]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.34.0-3ubuntu1.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-12087","versionConstraint":"< 5.34.0-3ubuntu1.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-12087","fix":{"state":"fixed","versions":["5.34.0-3ubuntu1.8"],"available":[{"date":"2026-08-25","kind":"advisory","version":"5.34.0-3ubuntu1.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-12087","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-12087","cwe":"CWE-805","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-12087","date":"2026-10-27","epss":0.00574,"percentile":0.47222}],"risk":0.28700000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-12087"},"relatedVulnerabilities":[{"id":"CVE-2026-12087","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12087","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-12087","cwe":"CWE-805","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-12087","date":"2026-10-27","epss":0.00574,"percentile":0.47222}],"urls":["https://github.com/Perl/perl5/commit/de19a0b0ad1900fef976c5c1400bd8f11ec6c6cb.patch","https://metacpan.org/release/PEVANS/Socket-2.041/changes","http://www.openwall.com/lists/oss-security/2026/06/15/10"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12087","description":"Socket versions before 2.041 for Perl have an out-of-bounds heap read.\n\nIn Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer.\n\nCalling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure."}]},{"artifact":{"id":"9487810cf2b0ac44","cpes":["cpe:2.3:a:gcc-12-base:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc-12-base:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc_12_base:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc_12_base:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc-12:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc-12:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc_12:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc_12:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*"],"name":"gcc-12-base","purl":"pkg:deb/ubuntu/gcc-12-base@12.3.0-1ubuntu1~22.04?arch=amd64&distro=ubuntu-22.04&upstream=gcc-12","type":"deb","version":"12.3.0-1ubuntu1~22.04","language":"","licenses":["sha256:da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-12-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/gcc-12-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gcc-12-base:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/gcc-12-base:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-12"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-27943","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gcc-12","version":"12.3.0-1ubuntu1~22.04"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2022-27943","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-27943","date":"2026-10-27","epss":0.00953,"percentile":0.61152}],"risk":0.2859,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-27943"},"relatedVulnerabilities":[{"id":"CVE-2022-27943","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-27943","date":"2026-10-27","epss":0.00953,"percentile":0.61152}],"urls":["https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/","https://sourceware.org/bugzilla/show_bug.cgi?id=28995","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27943","description":"libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new."}]},{"artifact":{"id":"0167188753744b50","cpes":["cpe:2.3:a:libgcc-s1:libgcc-s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-s1:libgcc_s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_s1:libgcc-s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_s1:libgcc_s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc-s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc_s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*"],"name":"libgcc-s1","purl":"pkg:deb/ubuntu/libgcc-s1@12.3.0-1ubuntu1~22.04?arch=amd64&distro=ubuntu-22.04&upstream=gcc-12","type":"deb","version":"12.3.0-1ubuntu1~22.04","language":"","licenses":["sha256:da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-12-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgcc-s1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgcc-s1:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgcc-s1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-12"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-27943","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gcc-12","version":"12.3.0-1ubuntu1~22.04"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2022-27943","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-27943","date":"2026-10-27","epss":0.00953,"percentile":0.61152}],"risk":0.2859,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-27943"},"relatedVulnerabilities":[{"id":"CVE-2022-27943","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-27943","date":"2026-10-27","epss":0.00953,"percentile":0.61152}],"urls":["https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/","https://sourceware.org/bugzilla/show_bug.cgi?id=28995","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27943","description":"libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new."}]},{"artifact":{"id":"0f7f38aaf7f6551a","cpes":["cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*"],"name":"libstdc++6","purl":"pkg:deb/ubuntu/libstdc%2B%2B6@12.3.0-1ubuntu1~22.04?arch=amd64&distro=ubuntu-22.04&upstream=gcc-12","type":"deb","version":"12.3.0-1ubuntu1~22.04","language":"","licenses":["sha256:da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-12-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libstdc++6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libstdc++6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libstdc++6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-12"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-27943","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gcc-12","version":"12.3.0-1ubuntu1~22.04"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2022-27943","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-27943","date":"2026-10-27","epss":0.00953,"percentile":0.61152}],"risk":0.2859,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-27943"},"relatedVulnerabilities":[{"id":"CVE-2022-27943","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-27943","date":"2026-10-27","epss":0.00953,"percentile":0.61152}],"urls":["https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/","https://sourceware.org/bugzilla/show_bug.cgi?id=28995","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27943","description":"libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new."}]},{"artifact":{"id":"fd33bcffbac145b9","cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:generic/krb5@1.21.2","type":"binary","version":"1.21.2","language":"","licenses":[],"locations":[{"path":"/opt/conda/lib/libkrb5.so.3.3","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libkrb5.so.3.3","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107708","versionConstraint":"<= 1.22.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"package":{"name":"krb5","version":"1.21.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-10-27","epss":0.00521,"percentile":0.44035}],"risk":0.283945,"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.21"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-69421","versionConstraint":"< 3.0.2-0ubuntu1.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-69421","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.21"],"available":[{"date":"2026-01-27","kind":"advisory","version":"3.0.2-0ubuntu1.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-69421","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69421","date":"2026-10-27","epss":0.00944,"percentile":0.60881}],"risk":0.2832,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-69421"},"relatedVulnerabilities":[{"id":"CVE-2025-69421","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69421","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69421","date":"2026-10-27","epss":0.00944,"percentile":0.60881}],"urls":["https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b","https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7","https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd","https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3","https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69421","description":"Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.21"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-69421","versionConstraint":"< 3.0.2-0ubuntu1.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-69421","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.21"],"available":[{"date":"2026-01-27","kind":"advisory","version":"3.0.2-0ubuntu1.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-69421","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69421","date":"2026-10-27","epss":0.00944,"percentile":0.60881}],"risk":0.2832,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-69421"},"relatedVulnerabilities":[{"id":"CVE-2025-69421","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69421","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69421","date":"2026-10-27","epss":0.00944,"percentile":0.60881}],"urls":["https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b","https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7","https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd","https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3","https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69421","description":"Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue."}]},{"artifact":{"id":"2ae4296b33299c2a","cpes":["cpe:2.3:a:momentjs:moment:2.29.4:*:*:*:*:node.js:*:*"],"name":"moment","purl":"pkg:npm/moment@2.29.4","type":"npm","version":"2.29.4","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/share/jupyterhub/static/components/moment/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/share/jupyterhub/static/components/moment/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.31.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4p3w-j4w9-5jqw","versionConstraint":">=2.29.2,<2.31.0 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"moment","version":"2.29.4"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-4p3w-j4w9-5jqw","fix":{"state":"fixed","versions":["2.31.0"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.31.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-17495","cwe":"CWE-27","type":"Secondary","source":"ce714d77-add3-4f53-aff5-83d477b104bb"}],"epss":[{"cve":"CVE-2026-17495","date":"2026-10-27","epss":0.00519,"percentile":0.43943}],"risk":0.282855,"urls":["https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw","https://nvd.nist.gov/vuln/detail/CVE-2026-17495","https://github.com/moment/moment/pull/6386","https://github.com/moment/moment/commit/5f7d983c9881e65e07574de9dda3190d99520c07","https://cna.openjsf.org/security-advisories.html","https://github.com/moment/moment/releases/tag/2.31.0"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4p3w-j4w9-5jqw","description":"moment vulnerable to Path Traversal via crafted non-string locale name"},"relatedVulnerabilities":[{"id":"CVE-2026-17495","cvss":[{"type":"Secondary","source":"ce714d77-add3-4f53-aff5-83d477b104bb","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-17495","cwe":"CWE-27","type":"Secondary","source":"ce714d77-add3-4f53-aff5-83d477b104bb"}],"epss":[{"cve":"CVE-2026-17495","date":"2026-10-27","epss":0.00519,"percentile":0.43943}],"urls":["https://cna.openjsf.org/security-advisories.html","https://github.com/moment/moment/security/advisories/GHSA-4p3w-j4w9-5jqw"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-17495","description":"moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale() can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object whose match() method satisfies the check while its toString() returns a traversal path reaches an internal require() call with attacker-controlled path segments. This is an incomplete fix for CVE-2022-24785 and primarily affects npm (server-side) users that pass user-provided input directly to moment.locale(). The issue is fixed in moment 2.31.0, and users should upgrade to 2.31.0 or later. As a workaround, validate that any user-supplied input is a string before passing it to moment.locale()."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-3833","versionConstraint":"< 3.7.3-4ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-3833","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.9"],"available":[{"date":"2026-05-20","kind":"advisory","version":"3.7.3-4ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-3833","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3833","date":"2026-10-27","epss":0.00565,"percentile":0.46737}],"risk":0.2825,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-3833"},"relatedVulnerabilities":[{"id":"CVE-2026-3833","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3833","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3833","date":"2026-10-27","epss":0.00565,"percentile":0.46737}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:57402","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:62409","https://access.redhat.com/errata/RHSA-2026:62549","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:65851","https://access.redhat.com/errata/RHSA-2026:67857","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-3833","https://bugzilla.redhat.com/show_bug.cgi?id=2445763","https://gitlab.com/gnutls/gnutls/-/issues/1803"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3833","description":"A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure."}]},{"artifact":{"id":"3a4f17bf127dff8c","cpes":["cpe:2.3:a:bootstrap:bootstrap:3.4.1:*:*:*:*:*:*:*"],"name":"bootstrap","purl":"pkg:npm/bootstrap@3.4.1","type":"npm","version":"3.4.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/share/jupyterhub/static/components/bootstrap/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/share/jupyterhub/static/components/bootstrap/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vxmc-5x29-h64v","versionConstraint":">=1.4.0,<=3.4.1 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"bootstrap","version":"3.4.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-vxmc-5x29-h64v","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":6.4,"impactScore":4.8,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6485","cwe":"CWE-79","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2024-6485","date":"2026-10-27","epss":0.00494,"percentile":0.42199}],"risk":0.28158000000000005,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-6485","https://www.herodevs.com/vulnerability-directory/cve-2024-6485","https://lists.debian.org/debian-lts-announce/2025/04/msg00020.html"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vxmc-5x29-h64v","description":"Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes"},"relatedVulnerabilities":[{"id":"CVE-2024-6485","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":6.4,"impactScore":4.8,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6485","cwe":"CWE-79","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2024-6485","date":"2026-10-27","epss":0.00494,"percentile":0.42199}],"urls":["https://www.herodevs.com/vulnerability-directory/cve-2024-6485","https://lists.debian.org/debian-lts-announce/2025/04/msg00020.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6485","description":"A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-6069","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.6||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-6069","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.6||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-6069","fix":{"state":"fixed","versions":["3.9.24","3.10.19","3.11.14","3.12.12","3.13.6","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.24"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.19"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-10-10","kind":"first-observed","version":"3.9.24"},{"date":"2025-10-10","kind":"first-observed","version":"3.10.19"},{"date":"2025-10-10","kind":"first-observed","version":"3.11.14"},{"date":"2025-10-10","kind":"first-observed","version":"3.12.12"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6069","cwe":"CWE-1333","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-6069","date":"2026-10-27","epss":0.00603,"percentile":0.48651}],"risk":0.28039499999999995,"urls":["https://github.com/python/cpython/commit/4455cbabf991e202185a25a631af206f60bbc949","https://github.com/python/cpython/commit/6eb6c5dbfb528bd07d77b60fd71fd05d81d45c41","https://github.com/python/cpython/commit/8d1b3dfa09135affbbf27fb8babcf3c11415df49","https://github.com/python/cpython/commit/ab0893fd5c579d9cea30841680e6d35fc478afb5","https://github.com/python/cpython/commit/d851f8e258c7328814943e923a7df81bca15df4b","https://github.com/python/cpython/commit/f3c6f882cddc8dc30320d2e73edf019e201394fc","https://github.com/python/cpython/commit/fdc9d214c01cb4588f540cfa03726bbf2a33fc15","https://github.com/python/cpython/issues/135462","https://github.com/python/cpython/pull/135464","https://mail.python.org/archives/list/security-announce@python.org/thread/K5PIYLR6EP3WR7ZOKKYQUWEDNQVUXOYM/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-6069","description":"The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service."},"relatedVulnerabilities":[]},{"artifact":{"id":"933d3f7a83a3748d","cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:generic/openssl@3.1.3","type":"binary","version":"3.1.3","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/openssl","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/openssl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.8"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-13176","versionConstraint":">= 1.0.2, < 1.0.2zl||>= 1.1.1, < 1.1.1zb||>= 3.0.0, < 3.0.16||>= 3.1.0, < 3.1.8||>= 3.2.0, < 3.2.4||>= 3.3.0, < 3.3.3||>= 3.4.0, < 3.4.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.1.3:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.1.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-13176","fix":{"state":"fixed","versions":["1.0.2zl","1.1.1zb","3.0.16","3.1.8","3.2.4","3.3.3","3.4.1"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.0.2zl"},{"date":"2025-09-04","kind":"first-observed","version":"1.1.1zb"},{"date":"2025-09-04","kind":"first-observed","version":"3.0.16"},{"date":"2025-09-04","kind":"first-observed","version":"3.1.8"},{"date":"2025-09-04","kind":"first-observed","version":"3.2.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.3.3"},{"date":"2025-09-04","kind":"first-observed","version":"3.4.1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.1,"impactScore":3.4,"exploitabilityScore":0.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-13176","cwe":"CWE-385","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-13176","date":"2026-10-27","epss":0.00609,"percentile":0.48928}],"risk":0.277095,"urls":["https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844","https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467","https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902","https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65","https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f","https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded","https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86","https://openssl-library.org/news/secadv/20250120.txt","http://www.openwall.com/lists/oss-security/2025/01/20/2","https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html","https://security.netapp.com/advisory/ntap-20250124-0005/","https://security.netapp.com/advisory/ntap-20250418-0010/","https://security.netapp.com/advisory/ntap-20250502-0006/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-13176","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-48959","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-48959","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-48959","cwe":"CWE-407","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48959","date":"2026-10-27","epss":0.00553,"percentile":0.46024}],"risk":0.2765,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-48959"},"relatedVulnerabilities":[{"id":"CVE-2026-48959","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48959","cwe":"CWE-407","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48959","date":"2026-10-27","epss":0.00553,"percentile":0.46024}],"urls":["https://github.com/pmqs/IO-Compress/commit/68db44076f4c1a86a2ffe53a958eac6cabaf72e2.patch","https://metacpan.org/release/PMQS/IO-Compress-2.220/changes","http://www.openwall.com/lists/oss-security/2026/05/27/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48959","description":"IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward.\n\nfastForward() compares length $offset (the digit count of the offset, 1 to 19) against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes per iteration.\n\nExtracting a named entry from an attacker supplied zip via IO::Uncompress::Unzip->new($zip, Name => $target) drives a per-byte read loop scaling with the entry's compressed size, up to the non-Zip64 4 GiB cap."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.21"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-69420","versionConstraint":"< 3.0.2-0ubuntu1.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-69420","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.21"],"available":[{"date":"2026-01-27","kind":"advisory","version":"3.0.2-0ubuntu1.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-69420","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69420","date":"2026-10-27","epss":0.0092,"percentile":0.60097}],"risk":0.27599999999999997,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-69420"},"relatedVulnerabilities":[{"id":"CVE-2025-69420","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69420","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69420","date":"2026-10-27","epss":0.0092,"percentile":0.60097}],"urls":["https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9","https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a","https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e","https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b","https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69420","description":"Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.21"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-69420","versionConstraint":"< 3.0.2-0ubuntu1.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-69420","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.21"],"available":[{"date":"2026-01-27","kind":"advisory","version":"3.0.2-0ubuntu1.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-69420","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69420","date":"2026-10-27","epss":0.0092,"percentile":0.60097}],"risk":0.27599999999999997,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-69420"},"relatedVulnerabilities":[{"id":"CVE-2025-69420","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69420","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69420","date":"2026-10-27","epss":0.0092,"percentile":0.60097}],"urls":["https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9","https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a","https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e","https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b","https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69420","description":"Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."}]},{"artifact":{"id":"fa287c7bb04e1dbb","cpes":["cpe:2.3:a:python:urllib3:2.0.7:*:*:*:*:*:*:*"],"name":"urllib3","purl":"pkg:pypi/urllib3@2.0.7","type":"python","version":"2.0.7","language":"python","licenses":[],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.8.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vxq7-64xx-v4gw","versionConstraint":">=1.10.3,<2.8.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"urllib3","version":"2.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-vxq7-64xx-v4gw","fix":{"state":"fixed","versions":["2.8.0"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.8.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97689","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-97689","date":"2026-10-27","epss":0.00335,"percentile":0.26673}],"risk":0.27470000000000006,"urls":["https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw","https://nvd.nist.gov/vuln/detail/CVE-2026-97689","https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed","https://github.com/urllib3/urllib3/releases/tag/2.8.0"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vxq7-64xx-v4gw","description":"urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory"},"relatedVulnerabilities":[{"id":"CVE-2026-97689","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97689","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-97689","date":"2026-10-27","epss":0.00335,"percentile":0.26673}],"urls":["https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed","https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97689","description":"urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long unterminated chunk-size line. The impact is that unbounded memory allocation can exhaust the client process. This issue is fixed in version 2.8.0."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3276","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3276","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3276","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b2"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-05","kind":"first-observed","version":"3.15.0b2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3276","cwe":"CWE-407","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-3276","date":"2026-10-27","epss":0.00486,"percentile":0.41662}],"risk":0.27458999999999995,"urls":["https://github.com/python/cpython/commit/6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0","https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598","https://github.com/python/cpython/commit/991224b1e8311c85f198f6dd8208bf8cff7fc26f","https://github.com/python/cpython/commit/ba785b88add96acbf403d65cb157fb2743a33a32","https://github.com/python/cpython/commit/c5512bd7c1dc28055660565275012766941d3066","https://github.com/python/cpython/commit/d3ab945af25b28dfe13ac6cb40c124a01b33ce1f","https://github.com/python/cpython/commit/db744c0776c1d5dd11aaa70eff2a6993c408bacc","https://github.com/python/cpython/commit/e322a1857084d521f79f45181b776f62e6acfc2c","https://github.com/python/cpython/issues/149079","https://github.com/python/cpython/pull/149080","https://mail.python.org/archives/list/security-announce@python.org/thread/PP5HB4K7727OBBM76KA2ILID76K3OZGZ/","http://www.openwall.com/lists/oss-security/2026/06/03/15"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3276","description":"unicodedata.normalize() can take excessive CPU time when processing\nspecially crafted Unicode input containing long runs of combining characters\nwith alternating Canonical Combining Class values.\nThis affects all normalization forms."},"relatedVulnerabilities":[]},{"artifact":{"id":"e68cc45a0b7ed402","cpes":["cpe:2.3:a:mike_bayer_project:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer_project:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayerproject:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayerproject:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_project:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_project:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer_project:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mikeproject:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mikeproject:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python-mako:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python-mako:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python_mako:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python_mako:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayerproject:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_project:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mako:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mako:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mikeproject:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python-mako:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python_mako:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mako:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike:mako:1.2.4:*:*:*:*:*:*:*"],"name":"mako","purl":"pkg:pypi/mako@1.2.4","type":"python","version":"1.2.4","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.3.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-v92g-xgxw-vvmm","versionConstraint":"<=1.3.10 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mako","version":"1.2.4"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-v92g-xgxw-vvmm","fix":{"state":"fixed","versions":["1.3.11"],"available":[{"date":"2026-04-17","kind":"first-observed","version":"1.3.11"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41205","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-41205","date":"2026-10-27","epss":0.00361,"percentile":0.29699}],"risk":0.272555,"urls":["https://github.com/sqlalchemy/mako/security/advisories/GHSA-v92g-xgxw-vvmm","https://nvd.nist.gov/vuln/detail/CVE-2026-41205","https://github.com/sqlalchemy/mako/commit/e05ac61989a7fb9dd7dcde6cfd72dc48328719a3","https://github.com/sqlalchemy/mako/releases/tag/rel_1_3_11","https://github.com/pypa/advisory-database/tree/main/vulns/mako/PYSEC-2026-88.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-v92g-xgxw-vvmm","description":"Mako: Path traversal via double-slash URI prefix in TemplateLookup"},"relatedVulnerabilities":[{"id":"CVE-2026-41205","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41205","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-41205","date":"2026-10-27","epss":0.00361,"percentile":0.29699}],"urls":["https://github.com/sqlalchemy/mako/commit/e05ac61989a7fb9dd7dcde6cfd72dc48328719a3","https://github.com/sqlalchemy/mako/releases/tag/rel_1_3_11","https://github.com/sqlalchemy/mako/security/advisories/GHSA-v92g-xgxw-vvmm"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-41205","description":"Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with // (e.g., //../../../secret.txt). The root cause is an inconsistency between two slash-stripping implementations. Any file readable by the process can be returned as rendered template content when an application passes untrusted input directly to TemplateLookup.get_template(). This vulnerability is fixed in 1.3.11."}]},{"artifact":{"id":"45f87362b5437c73","cpes":["cpe:2.3:a:hsiaoming_yang_\\<me_project:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:mistune:3.0.1:*:*:*:*:*:*:*"],"name":"mistune","purl":"pkg:pypi/mistune@3.0.1","type":"python","version":"3.0.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.3.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8mpj-m6qm-5qr8","versionConstraint":"<3.3.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mistune","version":"3.0.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-8mpj-m6qm-5qr8","fix":{"state":"fixed","versions":["3.3.0"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"3.3.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59927","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59927","cwe":"CWE-755","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59927","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-59927","date":"2026-10-27","epss":0.00529,"percentile":0.4456}],"risk":0.27243500000000004,"urls":["https://github.com/lepture/mistune/security/advisories/GHSA-8mpj-m6qm-5qr8","https://nvd.nist.gov/vuln/detail/CVE-2026-59927","https://github.com/lepture/mistune/commit/1bef343ade163fc3bb95572b15be720084cdb993","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/pypa/advisory-database/tree/main/vulns/mistune/PYSEC-2026-2215.yaml"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8mpj-m6qm-5qr8","description":"Mistune directives/include: mutual `.. include::` recursion crashes the renderer with `RecursionError`, denial of service via two attacker-controlled markdown files"},"relatedVulnerabilities":[{"id":"CVE-2026-59927","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59927","cwe":"CWE-674","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59927","cwe":"CWE-755","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59927","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-59927","date":"2026-10-27","epss":0.00529,"percentile":0.4456}],"urls":["https://github.com/lepture/mistune/commit/1bef343ade163fc3bb95572b15be720084cdb993","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/lepture/mistune/security/advisories/GHSA-8mpj-m6qm-5qr8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59927","description":"Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the Include directive in src/mistune/directives/include.py detects only direct self-includes and not indirect cycles, allowing two markdown files that include each other to trigger unbounded recursion, raise RecursionError, and crash the rendering request. This issue is fixed in version 3.3.0."}]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.34.0-3ubuntu1.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-56406","versionConstraint":"< 5.34.0-3ubuntu1.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-56406","fix":{"state":"fixed","versions":["5.34.0-3ubuntu1.4"],"available":[{"date":"2025-04-14","kind":"advisory","version":"5.34.0-3ubuntu1.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-56406","cwe":"CWE-122","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2024-56406","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2024-56406","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-56406","date":"2026-10-27","epss":0.00536,"percentile":0.44985}],"risk":0.268,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-56406"},"relatedVulnerabilities":[{"id":"CVE-2024-56406","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.4,"impactScore":5.9,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56406","cwe":"CWE-122","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2024-56406","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2024-56406","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-56406","date":"2026-10-27","epss":0.00536,"percentile":0.44985}],"urls":["https://github.com/Perl/perl5/commit/87f42aa0e0096e9a346c9672aa3a0bd3bef8c1dd.patch","https://metacpan.org/release/SHAY/perl-5.38.4/changes","https://metacpan.org/release/SHAY/perl-5.40.2/changes","http://www.openwall.com/lists/oss-security/2025/04/13/3","http://www.openwall.com/lists/oss-security/2025/04/13/4","http://www.openwall.com/lists/oss-security/2025/04/13/5"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-56406","description":"A heap buffer overflow vulnerability was discovered in Perl. \n\nRelease branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.\n\nWhen there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.\n\n   $ perl -e '$_ = \"\\x{FF}\" x 1000000; tr/\\xFF/\\x{100}/;' \n   Segmentation fault (core dumped)\n\nIt is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses."}]},{"artifact":{"id":"fd33bcffbac145b9","cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:generic/krb5@1.21.2","type":"binary","version":"1.21.2","language":"","licenses":[],"locations":[{"path":"/opt/conda/lib/libkrb5.so.3.3","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libkrb5.so.3.3","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2007-3149","versionConstraint":"none (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"package":{"name":"krb5","version":"1.21.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2007-3149","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":7.2,"impactScore":10.1,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-3149","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3149","date":"2026-10-27","epss":0.00363,"percentile":0.29963}],"risk":0.266805,"urls":["http://secunia.com/advisories/26540","http://www.securityfocus.com/archive/1/470739/100/0/threaded","http://www.securityfocus.com/archive/1/470752/100/0/threaded","http://www.securityfocus.com/archive/1/470774/100/0/threaded","http://www.securityfocus.com/bid/24368","http://www.sudo.ws/cgi-bin/cvsweb/sudo/auth/kerb5.c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-3149","description":"sudo, when linked with MIT Kerberos 5 (krb5), does not properly check whether a user can currently authenticate to Kerberos, which allows local users to gain privileges, in a manner unintended by the sudo security model, via certain KRB5_ environment variable settings.  NOTE: another researcher disputes this vulnerability, stating that the attacker must be \"a user, who can already log into your system, and can already use sudo.\""},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-19672","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.17"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-19672","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.17||>= 3.12.0, < 3.12.15||>= 3.13.0, < 3.13.16||>= 3.14.0, < 3.14.8||>= 3.15.0a1, < 3.15.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-19672","fix":{"state":"fixed","versions":["3.10.22","3.11.17","3.12.15","3.13.16","3.14.8","3.15.0rc2"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-10-02","kind":"first-observed","version":"3.11.17"},{"date":"2026-10-02","kind":"first-observed","version":"3.12.15"},{"date":"2026-10-02","kind":"first-observed","version":"3.13.16"},{"date":"2026-10-02","kind":"first-observed","version":"3.14.8"},{"date":"2026-10-02","kind":"first-observed","version":"3.15.0rc2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-10-27","epss":0.00472,"percentile":0.40606}],"risk":0.26668,"urls":["https://github.com/python/cpython/pull/156000","https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/","http://www.openwall.com/lists/oss-security/2026/08/25/10"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19672","description":"The tarfile module's tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member's\n name must contain the destination directory's own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.23"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28388","versionConstraint":"< 3.0.2-0ubuntu1.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-28388","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.23"],"available":[{"date":"2026-04-08","kind":"advisory","version":"3.0.2-0ubuntu1.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-27","epss":0.00885,"percentile":0.59041}],"risk":0.26549999999999996,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28388"},"relatedVulnerabilities":[{"id":"CVE-2026-28388","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-27","epss":0.00885,"percentile":0.59041}],"urls":["https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e","https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139","https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3","https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8","https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28388","description":"Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.23"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28388","versionConstraint":"< 3.0.2-0ubuntu1.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-28388","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.23"],"available":[{"date":"2026-04-08","kind":"advisory","version":"3.0.2-0ubuntu1.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-27","epss":0.00885,"percentile":0.59041}],"risk":0.26549999999999996,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28388"},"relatedVulnerabilities":[{"id":"CVE-2026-28388","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-27","epss":0.00885,"percentile":0.59041}],"urls":["https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e","https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139","https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3","https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8","https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28388","description":"Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"202f47eeeb880028","cpes":["cpe:2.3:a:python-anyio:python-anyio:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:python-anyio:python_anyio:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:python_anyio:python-anyio:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:python_anyio:python_anyio:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-anyio:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_anyio:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:anyio:python-anyio:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:anyio:python_anyio:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:python-anyio:anyio:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:python_anyio:anyio:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:python:anyio:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:anyio:anyio:4.0.0:*:*:*:*:*:*:*"],"name":"anyio","purl":"pkg:pypi/anyio@4.0.0","type":"python","version":"4.0.0","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/anyio-4.0.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/anyio-4.0.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/anyio-4.0.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/anyio-4.0.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/anyio-4.0.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/anyio-4.0.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/anyio-4.0.0.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/anyio-4.0.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.14.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-82r6-8w77-94w6","versionConstraint":"<4.14.2 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"anyio","version":"4.0.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-82r6-8w77-94w6","fix":{"state":"fixed","versions":["4.14.2"],"available":[{"date":"2026-09-19","kind":"first-observed","version":"4.14.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63374","cwe":"CWE-295","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-63374","cwe":"CWE-297","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-63374","date":"2026-10-27","epss":0.00289,"percentile":0.21332}],"risk":0.26443500000000003,"urls":["https://github.com/agronholm/anyio/security/advisories/GHSA-82r6-8w77-94w6","https://github.com/agronholm/anyio/pull/1208","https://github.com/agronholm/anyio/commit/68f58915f82d9be8109ebbbd8f5d70577d43f2ce","https://github.com/agronholm/anyio/releases/tag/4.14.2"],"severity":"Critical","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-82r6-8w77-94w6","description":"AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing"},"relatedVulnerabilities":[{"id":"CVE-2026-63374","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63374","cwe":"CWE-295","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-63374","cwe":"CWE-297","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-63374","date":"2026-10-27","epss":0.00289,"percentile":0.21332}],"urls":["https://github.com/agronholm/anyio/commit/68f58915f82d9be8109ebbbd8f5d70577d43f2ce","https://github.com/agronholm/anyio/pull/1208","https://github.com/agronholm/anyio/releases/tag/4.14.2","https://github.com/agronholm/anyio/security/advisories/GHSA-82r6-8w77-94w6"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63374","description":"AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connect_tcp() and TLSStream.wrap() can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a connection to a non-ASCII domain is hijacked or redirected, an attacker can obtain a legitimate certificate for the different ASCII hostname produced by IDNA 2003 and present it to the client, causing the malicious endpoint's certificate to validate. This issue is fixed in version 4.14.2."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-0672","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-0672","versionConstraint":"< 3.10.20||>= 3.11.0, < 3.11.15||>= 3.12.0, < 3.12.13||>= 3.13.0, < 3.13.12||>= 3.14.0, < 3.14.3||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-0672","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.12","3.14.3","3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.3"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-04-10","kind":"first-observed","version":"3.10.20"},{"date":"2026-04-10","kind":"first-observed","version":"3.11.15"},{"date":"2026-04-10","kind":"first-observed","version":"3.12.13"},{"date":"2026-03-03","kind":"first-observed","version":"3.13.12"},{"date":"2026-03-03","kind":"first-observed","version":"3.14.3"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0672","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-0672","date":"2026-10-27","epss":0.0048,"percentile":0.41217}],"risk":0.264,"urls":["https://github.com/python/cpython/commit/62700107418eb2cca3fc88da036a243ea975f172","https://github.com/python/cpython/commit/712452e6f1d4b9f7f8c4c92ebfcaac1705faa440","https://github.com/python/cpython/commit/7852d72b653fea0199acf5fc2a84f6f8b84eba8d","https://github.com/python/cpython/commit/918387e4912d12ffc166c8f2a38df92b6ec756ca","https://github.com/python/cpython/commit/95746b3a13a985787ef53b977129041971ed7f70","https://github.com/python/cpython/commit/b1869ff648bbee0717221d09e6deff46617f3e85","https://github.com/python/cpython/issues/143919","https://github.com/python/cpython/pull/143920","https://mail.python.org/archives/list/security-announce@python.org/thread/6VFLQQEIX673KXKFUZXCUNE5AZOGZ45M/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0672","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters."},"relatedVulnerabilities":[]},{"artifact":{"id":"caa129f4dfb84903","cpes":["cpe:2.3:a:armin_ronacher_project:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher_project:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher_project:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:jinja2:3.1.2:*:*:*:*:*:*:*"],"name":"jinja2","purl":"pkg:pypi/jinja2@3.1.2","type":"python","version":"3.1.2","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cpwx-vrp4-4pq7","versionConstraint":"<=3.1.5 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jinja2","version":"3.1.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-cpwx-vrp4-4pq7","fix":{"state":"fixed","versions":["3.1.6"],"available":[{"date":"2025-03-06","kind":"first-observed","version":"3.1.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":5.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-27516","cwe":"CWE-1336","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-27516","date":"2026-10-27","epss":0.00507,"percentile":0.43053}],"risk":0.26364,"urls":["https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7","https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403","https://nvd.nist.gov/vuln/detail/CVE-2025-27516","https://lists.debian.org/debian-lts-announce/2025/04/msg00045.html","https://lists.debian.org/debian-lts-announce/2025/04/msg00022.html"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cpwx-vrp4-4pq7","description":"Jinja2 vulnerable to sandbox breakout through attr filter selecting format method"},"relatedVulnerabilities":[{"id":"CVE-2025-27516","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":6.1,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-27516","cwe":"CWE-1336","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-27516","date":"2026-10-27","epss":0.00507,"percentile":0.43053}],"urls":["https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403","https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7","https://lists.debian.org/debian-lts-announce/2025/04/msg00022.html","https://lists.debian.org/debian-lts-announce/2025/04/msg00045.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-27516","description":"Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to str.format and ensures they don't escape the sandbox. However, it's possible to use the |attr filter to get a reference to a string's plain format method, bypassing the sandbox. After the fix, the |attr filter no longer bypasses the environment's attribute lookup. This vulnerability is fixed in 3.1.6."}]},{"artifact":{"id":"2be93b05c90e670e","cpes":["cpe:2.3:a:pacote:pacote:17.0.4:*:*:*:*:*:*:*","cpe:2.3:a:npm:pacote:17.0.4:*:*:*:*:*:*:*"],"name":"pacote","purl":"pkg:npm/pacote@17.0.4","type":"npm","version":"17.0.4","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/pacote/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/pacote/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"21.5.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-w4pp-8pjf-rmxw","versionConstraint":">=11.2.7,<21.5.1 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"pacote","version":"17.0.4"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-w4pp-8pjf-rmxw","fix":{"state":"fixed","versions":["21.5.1"],"available":[{"date":"2026-08-27","kind":"first-observed","version":"21.5.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9496","cwe":"CWE-1333","type":"Secondary","source":"report@snyk.io"},{"cve":"CVE-2026-9496","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-9496","date":"2026-10-27","epss":0.00346,"percentile":0.27983}],"risk":0.26123,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-9496","https://github.com/npm/pacote/blob/9d7459440826ab4cf962ef98d8f3fd0c4d464b5c/lib/util/add-git-sha.js%23L2C1-L13C2","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-16874025","https://security.snyk.io/vuln/SNYK-JS-PACOTE-8225084","https://github.com/npm/pacote/commit/627a7dc1a214d857472a13b48e42559c75288c9e","https://github.com/npm/pacote/commit/ce804fb1647fe1699b2f87efd01ea9f4efed8508","https://github.com/npm/pacote/releases/tag/v21.5.1","https://github.com/npm/pacote/releases/tag/v22.0.0"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-w4pp-8pjf-rmxw","description":"pacote is vulnerable to Denial of Service (DoS) via the addGitSha function"},"relatedVulnerabilities":[{"id":"CVE-2026-9496","cvss":[{"type":"Secondary","source":"report@snyk.io","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"report@snyk.io","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9496","cwe":"CWE-1333","type":"Secondary","source":"report@snyk.io"},{"cve":"CVE-2026-9496","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-9496","date":"2026-10-27","epss":0.00346,"percentile":0.27983}],"urls":["https://github.com/npm/pacote/blob/9d7459440826ab4cf962ef98d8f3fd0c4d464b5c/lib/util/add-git-sha.js%23L2C1-L13C2","https://github.com/npm/pacote/commit/ce804fb1647fe1699b2f87efd01ea9f4efed8508","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-16874025","https://security.snyk.io/vuln/SNYK-JS-PACOTE-8225084"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9496","description":"Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function’s regex replacement and string-manipulation logic,  causing excessive CPU consumption and potentially stalling or crashing the process."}]},{"artifact":{"id":"9bfa8bd71796afc6","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-10-27","epss":0.00521,"percentile":0.44035}],"risk":0.2605,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107708"},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-10-27","epss":0.00521,"percentile":0.44035}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"7570e146ba37f512","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-10-27","epss":0.00521,"percentile":0.44035}],"risk":0.2605,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107708"},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-10-27","epss":0.00521,"percentile":0.44035}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"513c46e2da3930be","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-10-27","epss":0.00521,"percentile":0.44035}],"risk":0.2605,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107708"},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-10-27","epss":0.00521,"percentile":0.44035}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"09c4acfd49c598b7","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-10-27","epss":0.00521,"percentile":0.44035}],"risk":0.2605,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107708"},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-10-27","epss":0.00521,"percentile":0.44035}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"9d60751a9fbaf207","cpes":["cpe:2.3:a:python_tornado_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornadoproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook_project:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebookproject:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python-tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python_tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python-tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python_tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:facebook:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:tornado:tornado:6.3.3:*:*:*:*:*:*:*","cpe:2.3:a:python:tornado:6.3.3:*:*:*:*:*:*:*"],"name":"tornado","purl":"pkg:pypi/tornado@6.3.3","type":"python","version":"6.3.3","language":"python","licenses":["Apache-2.0"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/tornado-6.3.3.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"6.5.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mpf4-983q-p7j4","versionConstraint":"<=6.5.7 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"tornado","version":"6.3.3"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-mpf4-983q-p7j4","fix":{"state":"fixed","versions":["6.5.8"],"available":[{"date":"2026-09-02","kind":"first-observed","version":"6.5.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82397","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-82397","cwe":"CWE-1284","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-82397","date":"2026-10-27","epss":0.00346,"percentile":0.27982}],"risk":0.2595,"urls":["https://github.com/tornadoweb/tornado/security/advisories/GHSA-mpf4-983q-p7j4","https://nvd.nist.gov/vuln/detail/CVE-2026-82397","https://github.com/tornadoweb/tornado/pull/3704","https://github.com/tornadoweb/tornado/commit/8d6363ed7b69d5f0da806efe34d256627a2191de","https://github.com/tornadoweb/tornado/releases/tag/v6.5.8"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mpf4-983q-p7j4","description":"Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop"},"relatedVulnerabilities":[{"id":"CVE-2026-82397","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82397","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-82397","cwe":"CWE-1284","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-82397","date":"2026-10-27","epss":0.00346,"percentile":0.27982}],"urls":["https://github.com/tornadoweb/tornado/commit/8d6363ed7b69d5f0da806efe34d256627a2191de","https://github.com/tornadoweb/tornado/pull/3704","https://github.com/tornadoweb/tornado/releases/tag/v6.5.8","https://github.com/tornadoweb/tornado/security/advisories/GHSA-mpf4-983q-p7j4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82397","description":"Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parse_qs in tornado/escape.py without passing max_num_fields. RequestHandler._execute in tornado/web.py parses the body before handler dispatch through HTTPServerRequest._parse_body and parse_body_arguments in tornado/httputil.py, so an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection. The body is bounded only by max_buffer_size, which defaults to 104857600 bytes. This issue is fixed in version 6.5.8."}]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-9538","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-9538","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-9538","cwe":"CWE-789","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-9538","date":"2026-10-27","epss":0.00517,"percentile":0.43821}],"risk":0.2585,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-9538"},"relatedVulnerabilities":[{"id":"CVE-2026-9538","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9538","cwe":"CWE-789","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-9538","date":"2026-10-27","epss":0.00517,"percentile":0.43821}],"urls":["https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch","https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes","http://www.openwall.com/lists/oss-security/2026/05/26/4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9538","description":"Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size."}]},{"artifact":{"id":"4192b772fea9db3e","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.13"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-f886-m6hf-6m8v","versionConstraint":"<1.1.13 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-f886-m6hf-6m8v","fix":{"state":"fixed","versions":["1.1.13"],"available":[{"date":"2026-03-27","kind":"first-observed","version":"1.1.13"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33750","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33750","date":"2026-10-27","epss":0.00447,"percentile":0.38711}],"risk":0.25702499999999995,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v","https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113","https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184","https://github.com/juliangruber/brace-expansion/issues/98","https://github.com/juliangruber/brace-expansion/pull/95","https://github.com/juliangruber/brace-expansion/pull/96","https://github.com/juliangruber/brace-expansion/pull/97","https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5","https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2","https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a","https://nvd.nist.gov/vuln/detail/CVE-2026-33750"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","description":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-33750","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33750","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33750","date":"2026-10-27","epss":0.00447,"percentile":0.38711}],"urls":["https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113","https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184","https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5","https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2","https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a","https://github.com/juliangruber/brace-expansion/issues/98","https://github.com/juliangruber/brace-expansion/pull/95","https://github.com/juliangruber/brace-expansion/pull/96","https://github.com/juliangruber/brace-expansion/pull/97","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33750","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value (e.g., `{1..2..0}`) causes the sequence generation loop to run indefinitely, making the process hang for seconds and allocate heaps of memory. Versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13 fix the issue. As a workaround, sanitize strings passed to `expand()` to ensure a step value of `0` is not used."}]},{"artifact":{"id":"77066e7e6d2a4d57","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.13"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-f886-m6hf-6m8v","versionConstraint":"<1.1.13 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-f886-m6hf-6m8v","fix":{"state":"fixed","versions":["1.1.13"],"available":[{"date":"2026-03-27","kind":"first-observed","version":"1.1.13"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33750","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33750","date":"2026-10-27","epss":0.00447,"percentile":0.38711}],"risk":0.25702499999999995,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v","https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113","https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184","https://github.com/juliangruber/brace-expansion/issues/98","https://github.com/juliangruber/brace-expansion/pull/95","https://github.com/juliangruber/brace-expansion/pull/96","https://github.com/juliangruber/brace-expansion/pull/97","https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5","https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2","https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a","https://nvd.nist.gov/vuln/detail/CVE-2026-33750"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","description":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-33750","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33750","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33750","date":"2026-10-27","epss":0.00447,"percentile":0.38711}],"urls":["https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113","https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184","https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5","https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2","https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a","https://github.com/juliangruber/brace-expansion/issues/98","https://github.com/juliangruber/brace-expansion/pull/95","https://github.com/juliangruber/brace-expansion/pull/96","https://github.com/juliangruber/brace-expansion/pull/97","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33750","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value (e.g., `{1..2..0}`) causes the sequence generation loop to run indefinitely, making the process hang for seconds and allocate heaps of memory. Versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13 fix the issue. As a workaround, sanitize strings passed to `expand()` to ensure a step value of `0` is not used."}]},{"artifact":{"id":"b08ada23090bcd4d","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.0.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-f886-m6hf-6m8v","versionConstraint":">=2.0.0,<2.0.3 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-f886-m6hf-6m8v","fix":{"state":"fixed","versions":["2.0.3"],"available":[{"date":"2026-03-27","kind":"first-observed","version":"2.0.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33750","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33750","date":"2026-10-27","epss":0.00447,"percentile":0.38711}],"risk":0.25702499999999995,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v","https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113","https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184","https://github.com/juliangruber/brace-expansion/issues/98","https://github.com/juliangruber/brace-expansion/pull/95","https://github.com/juliangruber/brace-expansion/pull/96","https://github.com/juliangruber/brace-expansion/pull/97","https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5","https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2","https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a","https://nvd.nist.gov/vuln/detail/CVE-2026-33750"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","description":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-33750","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33750","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33750","date":"2026-10-27","epss":0.00447,"percentile":0.38711}],"urls":["https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113","https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184","https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5","https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2","https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a","https://github.com/juliangruber/brace-expansion/issues/98","https://github.com/juliangruber/brace-expansion/pull/95","https://github.com/juliangruber/brace-expansion/pull/96","https://github.com/juliangruber/brace-expansion/pull/97","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33750","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value (e.g., `{1..2..0}`) causes the sequence generation loop to run indefinitely, making the process hang for seconds and allocate heaps of memory. Versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13 fix the issue. As a workaround, sanitize strings passed to `expand()` to ensure a step value of `0` is not used."}]},{"artifact":{"id":"fa77c1473ae8947b","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.0.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-f886-m6hf-6m8v","versionConstraint":">=2.0.0,<2.0.3 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-f886-m6hf-6m8v","fix":{"state":"fixed","versions":["2.0.3"],"available":[{"date":"2026-03-27","kind":"first-observed","version":"2.0.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33750","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33750","date":"2026-10-27","epss":0.00447,"percentile":0.38711}],"risk":0.25702499999999995,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v","https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113","https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184","https://github.com/juliangruber/brace-expansion/issues/98","https://github.com/juliangruber/brace-expansion/pull/95","https://github.com/juliangruber/brace-expansion/pull/96","https://github.com/juliangruber/brace-expansion/pull/97","https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5","https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2","https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a","https://nvd.nist.gov/vuln/detail/CVE-2026-33750"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-f886-m6hf-6m8v","description":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-33750","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33750","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33750","date":"2026-10-27","epss":0.00447,"percentile":0.38711}],"urls":["https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113","https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184","https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5","https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2","https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a","https://github.com/juliangruber/brace-expansion/issues/98","https://github.com/juliangruber/brace-expansion/pull/95","https://github.com/juliangruber/brace-expansion/pull/96","https://github.com/juliangruber/brace-expansion/pull/97","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33750","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value (e.g., `{1..2..0}`) causes the sequence generation loop to run indefinitely, making the process hang for seconds and allocate heaps of memory. Versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13 fix the issue. As a workaround, sanitize strings passed to `expand()` to ensure a step value of `0` is not used."}]},{"artifact":{"id":"b96ada19cdd5e352","cpes":["cpe:2.3:a:jupyter_development_team_project:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_project:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_teamproject:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_teamproject:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_project:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_teamproject:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterhub:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterhub:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterhub:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterhub:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_project:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_project:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterproject:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterproject:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterhub:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterhub:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterhub:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterhub:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_project:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterproject:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterhub:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyterhub:4.0.2:*:*:*:*:*:*:*"],"name":"jupyterhub","purl":"pkg:pypi/jupyterhub@4.0.2","type":"python","version":"4.0.2","language":"python","licenses":["BSD"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.1.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7r3h-4ph8-w38g","versionConstraint":"<4.1.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyterhub","version":"4.0.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-7r3h-4ph8-w38g","fix":{"state":"fixed","versions":["4.1.0"],"available":[{"date":"2024-03-29","kind":"first-observed","version":"4.1.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28233","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-28233","cwe":"CWE-352","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-28233","cwe":"CWE-565","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-28233","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-28233","date":"2026-10-27","epss":0.00329,"percentile":0.2586}],"risk":0.25662,"urls":["https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-7r3h-4ph8-w38g","https://nvd.nist.gov/vuln/detail/CVE-2024-28233","https://github.com/jupyterhub/jupyterhub/commit/e2798a088f5ad45340fe79cdf1386198e664f77f"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7r3h-4ph8-w38g","description":"Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing"},"relatedVulnerabilities":[{"id":"CVE-2024-28233","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28233","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-28233","cwe":"CWE-352","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-28233","cwe":"CWE-565","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-28233","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-28233","date":"2026-10-27","epss":0.00329,"percentile":0.2586}],"urls":["https://github.com/jupyterhub/jupyterhub/commit/e2798a088f5ad45340fe79cdf1386198e664f77f","https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-7r3h-4ph8-w38g"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28233","description":"JupyterHub is an open source multi-user server for Jupyter notebooks. By tricking a user into visiting a malicious subdomain, the attacker can achieve an XSS directly affecting the former's session. More precisely, in the context of JupyterHub, this XSS could achieve full access to JupyterHub API and user's single-user server. The affected configurations are single-origin JupyterHub deployments and JupyterHub deployments with user-controlled applications running on subdomains or peer subdomains of either the Hub or a single-user server. This vulnerability is fixed in 4.1.0."}]},{"artifact":{"id":"8a3634c40e472fc9","cpes":["cpe:2.3:a:pip_developers_project:python-pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pip_developers_project:python_pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:distutils_sig_project:python-pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:distutils_sig_project:python_pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pip_developersproject:python-pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pip_developersproject:python_pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:distutils_sigproject:python-pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:distutils_sigproject:python_pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pip_developers_project:pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:distutils_sig_project:pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pip_developers:python-pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pip_developers:python_pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pip_developersproject:pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:distutils-sig:python-pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:distutils-sig:python_pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:distutils_sig:python-pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:distutils_sig:python_pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:distutils_sigproject:pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:python-pip:python-pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:python-pip:python_pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:python_pip:python-pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:python_pip:python_pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pip_developers:pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:distutils-sig:pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:distutils_sig:pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python-pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python_pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pypa:python-pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pypa:python_pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pip:python-pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pip:python_pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:python-pip:pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:python_pip:pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:python:pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pypa:pip:23.3:*:*:*:*:*:*:*","cpe:2.3:a:pip:pip:23.3:*:*:*:*:*:*:*"],"name":"pip","purl":"pkg:pypi/pip@23.3","type":"python","version":"23.3","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/pip-23.3-py3.12.egg-info/PKG-INFO","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/pip-23.3-py3.12.egg-info/PKG-INFO","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/pip-23.3-py3.12.egg-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/pip-23.3-py3.12.egg-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"25.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4xh5-x5gv-qwph","versionConstraint":"<=25.2 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"pip","version":"23.3"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-4xh5-x5gv-qwph","fix":{"state":"fixed","versions":["25.3"],"available":[{"date":"2025-10-28","kind":"first-observed","version":"25.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-8869","date":"2026-10-27","epss":0.00469,"percentile":0.40426}],"risk":0.255605,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-8869","https://github.com/pypa/pip/pull/13550","https://mail.python.org/archives/list/security-announce@python.org/thread/IF5A3GCJY3VH7BVHJKOWOJFKTW7VFQEN","https://github.com/pypa/pip/commit/f2b92314da012b9fffa36b3f3e67748a37ef464a","https://pip.pypa.io/en/stable/news/#v25-2","https://lists.debian.org/debian-lts-announce/2025/10/msg00028.html"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4xh5-x5gv-qwph","description":"pip's fallback tar extraction doesn't check symbolic links point to extraction directory"},"relatedVulnerabilities":[{"id":"CVE-2025-8869","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-8869","date":"2026-10-27","epss":0.00469,"percentile":0.40426}],"urls":["https://github.com/pypa/pip/pull/13550","https://mail.python.org/archives/list/security-announce@python.org/thread/IF5A3GCJY3VH7BVHJKOWOJFKTW7VFQEN/","https://lists.debian.org/debian-lts-announce/2025/10/msg00028.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-8869","description":"When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706.\nNote that upgrading pip to a \"fixed\" version for this vulnerability doesn't fix all known vulnerabilities that are remediated by using a Python version that implements PEP 706.\n\nNote that this is a vulnerability in pip's fallback implementation of tar extraction for Python versions that don't implement PEP 706\nand therefore are not secure to all vulnerabilities in the Python 'tarfile' module. If you're using a Python version that implements PEP 706\nthen pip doesn't use the \"vulnerable\" fallback code.\n\nMitigations include upgrading to a version of pip that includes the fix, upgrading to a Python version that implements PEP 706 (Python >=3.9.17, >=3.10.12, >=3.11.4, or >=3.12),\napplying the linked patch, or inspecting source distributions (sdists) before installation as is already a best-practice."}]},{"artifact":{"id":"b62112f993add20b","cpes":["cpe:2.3:a:daniel_holth_\\<dholth_project:python-wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:daniel_holth_\\<dholth_project:python_wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:daniel_holth_\\<dholthproject:python-wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:daniel_holth_\\<dholthproject:python_wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:daniel_holth_\\<dholth_project:wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:daniel-holth-\\<dholth:python-wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:daniel-holth-\\<dholth:python_wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:daniel_holth_\\<dholth:python-wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:daniel_holth_\\<dholth:python_wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:daniel_holth_\\<dholthproject:wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:daniel-holth-\\<dholth:wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:daniel_holth_\\<dholth:wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:python-wheel:python-wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:python-wheel:python_wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:python_wheel:python-wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:python_wheel:python_wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python-wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python_wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:python-wheel:wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:python_wheel:wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:wheel:python-wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:wheel:python_wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:python:wheel:0.41.2:*:*:*:*:*:*:*","cpe:2.3:a:wheel:wheel:0.41.2:*:*:*:*:*:*:*"],"name":"wheel","purl":"pkg:pypi/wheel@0.41.2","type":"python","version":"0.41.2","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/wheel-0.41.2.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/wheel-0.41.2.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/wheel-0.41.2.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/wheel-0.41.2.dist-info/RECORD","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"0.46.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8rrh-rw8j-w5fx","versionConstraint":">=0.40.0,<=0.46.1 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"wheel","version":"0.41.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-8rrh-rw8j-w5fx","fix":{"state":"fixed","versions":["0.46.2"],"available":[{"date":"2026-01-23","kind":"first-observed","version":"0.46.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-24049","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-24049","cwe":"CWE-732","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-24049","cwe":"CWE-22","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2026-24049","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-24049","date":"2026-10-27","epss":0.0035,"percentile":0.28445}],"risk":0.2555,"urls":["https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx","https://nvd.nist.gov/vuln/detail/CVE-2026-24049","https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef","https://github.com/pypa/wheel/releases/tag/0.46.2","https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8rrh-rw8j-w5fx","description":"Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack"},"relatedVulnerabilities":[{"id":"CVE-2026-24049","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-24049","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-24049","cwe":"CWE-732","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-24049","cwe":"CWE-22","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2026-24049","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-24049","date":"2026-10-27","epss":0.0035,"percentile":0.28445}],"urls":["https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef","https://github.com/pypa/wheel/releases/tag/0.46.2","https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx","https://access.redhat.com/errata/RHSA-2026:10184","https://access.redhat.com/errata/RHSA-2026:13545","https://access.redhat.com/errata/RHSA-2026:14020","https://access.redhat.com/errata/RHSA-2026:1504","https://access.redhat.com/errata/RHSA-2026:17599","https://access.redhat.com/errata/RHSA-2026:1902","https://access.redhat.com/errata/RHSA-2026:1939","https://access.redhat.com/errata/RHSA-2026:1942","https://access.redhat.com/errata/RHSA-2026:19712","https://access.redhat.com/errata/RHSA-2026:20089","https://access.redhat.com/errata/RHSA-2026:2090","https://access.redhat.com/errata/RHSA-2026:2106","https://access.redhat.com/errata/RHSA-2026:2139","https://access.redhat.com/errata/RHSA-2026:2675","https://access.redhat.com/errata/RHSA-2026:2681","https://access.redhat.com/errata/RHSA-2026:2694","https://access.redhat.com/errata/RHSA-2026:2695","https://access.redhat.com/errata/RHSA-2026:2710","https://access.redhat.com/errata/RHSA-2026:2754","https://access.redhat.com/errata/RHSA-2026:2762","https://access.redhat.com/errata/RHSA-2026:2823","https://access.redhat.com/errata/RHSA-2026:2865","https://access.redhat.com/errata/RHSA-2026:2866","https://access.redhat.com/errata/RHSA-2026:2900","https://access.redhat.com/errata/RHSA-2026:2925","https://access.redhat.com/errata/RHSA-2026:3461","https://access.redhat.com/errata/RHSA-2026:3462","https://access.redhat.com/errata/RHSA-2026:3713","https://access.redhat.com/errata/RHSA-2026:3782","https://access.redhat.com/errata/RHSA-2026:3958","https://access.redhat.com/errata/RHSA-2026:3959","https://access.redhat.com/errata/RHSA-2026:3960","https://access.redhat.com/errata/RHSA-2026:4185","https://access.redhat.com/errata/RHSA-2026:4215","https://access.redhat.com/errata/RHSA-2026:4271","https://access.redhat.com/errata/RHSA-2026:4942","https://access.redhat.com/errata/RHSA-2026:5119","https://access.redhat.com/errata/RHSA-2026:61628","https://access.redhat.com/errata/RHSA-2026:6192","https://access.redhat.com/errata/RHSA-2026:62115","https://access.redhat.com/errata/RHSA-2026:6555","https://access.redhat.com/errata/RHSA-2026:6562","https://access.redhat.com/errata/RHSA-2026:6565","https://access.redhat.com/errata/RHSA-2026:7250","https://access.redhat.com/security/cve/CVE-2026-24049","https://bugzilla.redhat.com/show_bug.cgi?id=2431959","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24049.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-24049","description":"wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts. This issue has been fixed in version 0.46.2."}]},{"artifact":{"id":"4192b772fea9db3e","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.16"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3jxr-9vmj-r5cp","versionConstraint":"<1.1.16 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-3jxr-9vmj-r5cp","fix":{"state":"fixed","versions":["1.1.16"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"1.1.16"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13149","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-13149","cwe":"CWE-407","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-13149","date":"2026-10-27","epss":0.00364,"percentile":0.30047}],"risk":0.25479999999999997,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp","https://nvd.nist.gov/vuln/detail/CVE-2026-13149","https://github.com/juliangruber/brace-expansion/pull/122","https://github.com/juliangruber/brace-expansion/pull/123","https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265","https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754","https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95","https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16","https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2","https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7","https://www.npmjs.com/package/brace-expansion"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","description":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups"},"relatedVulnerabilities":[{"id":"CVE-2026-13149","cvss":[{"type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Amber","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13149","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-13149","cwe":"CWE-407","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-13149","date":"2026-10-27","epss":0.00364,"percentile":0.30047}],"urls":["https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754","https://www.npmjs.com/package/brace-expansion"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13149","description":"brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work."}]},{"artifact":{"id":"77066e7e6d2a4d57","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.16"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3jxr-9vmj-r5cp","versionConstraint":"<1.1.16 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-3jxr-9vmj-r5cp","fix":{"state":"fixed","versions":["1.1.16"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"1.1.16"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13149","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-13149","cwe":"CWE-407","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-13149","date":"2026-10-27","epss":0.00364,"percentile":0.30047}],"risk":0.25479999999999997,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp","https://nvd.nist.gov/vuln/detail/CVE-2026-13149","https://github.com/juliangruber/brace-expansion/pull/122","https://github.com/juliangruber/brace-expansion/pull/123","https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265","https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754","https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95","https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16","https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2","https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7","https://www.npmjs.com/package/brace-expansion"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","description":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups"},"relatedVulnerabilities":[{"id":"CVE-2026-13149","cvss":[{"type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Amber","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13149","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-13149","cwe":"CWE-407","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-13149","date":"2026-10-27","epss":0.00364,"percentile":0.30047}],"urls":["https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754","https://www.npmjs.com/package/brace-expansion"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13149","description":"brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work."}]},{"artifact":{"id":"fa77c1473ae8947b","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.1.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3jxr-9vmj-r5cp","versionConstraint":">=2.0.0,<2.1.2 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-3jxr-9vmj-r5cp","fix":{"state":"fixed","versions":["2.1.2"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"2.1.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13149","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-13149","cwe":"CWE-407","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-13149","date":"2026-10-27","epss":0.00364,"percentile":0.30047}],"risk":0.25479999999999997,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp","https://nvd.nist.gov/vuln/detail/CVE-2026-13149","https://github.com/juliangruber/brace-expansion/pull/122","https://github.com/juliangruber/brace-expansion/pull/123","https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265","https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754","https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95","https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16","https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2","https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7","https://www.npmjs.com/package/brace-expansion"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","description":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups"},"relatedVulnerabilities":[{"id":"CVE-2026-13149","cvss":[{"type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Amber","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13149","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-13149","cwe":"CWE-407","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-13149","date":"2026-10-27","epss":0.00364,"percentile":0.30047}],"urls":["https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754","https://www.npmjs.com/package/brace-expansion"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13149","description":"brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work."}]},{"artifact":{"id":"b08ada23090bcd4d","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.1.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3jxr-9vmj-r5cp","versionConstraint":">=2.0.0,<2.1.2 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-3jxr-9vmj-r5cp","fix":{"state":"fixed","versions":["2.1.2"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"2.1.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13149","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-13149","cwe":"CWE-407","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-13149","date":"2026-10-27","epss":0.00364,"percentile":0.30047}],"risk":0.25479999999999997,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp","https://nvd.nist.gov/vuln/detail/CVE-2026-13149","https://github.com/juliangruber/brace-expansion/pull/122","https://github.com/juliangruber/brace-expansion/pull/123","https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265","https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754","https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95","https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16","https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2","https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7","https://www.npmjs.com/package/brace-expansion"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3jxr-9vmj-r5cp","description":"brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups"},"relatedVulnerabilities":[{"id":"CVE-2026-13149","cvss":[{"type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Amber","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13149","cwe":"CWE-400","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"cve":"CVE-2026-13149","cwe":"CWE-407","type":"Secondary","source":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"}],"epss":[{"cve":"CVE-2026-13149","date":"2026-10-27","epss":0.00364,"percentile":0.30047}],"urls":["https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754","https://www.npmjs.com/package/brace-expansion"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13149","description":"brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work."}]},{"artifact":{"id":"0821d6f01b00c4aa","cpes":["cpe:2.3:a:libsystemd0:libsystemd0:249.11-0ubuntu3.10:*:*:*:*:*:*:*"],"name":"libsystemd0","purl":"pkg:deb/ubuntu/libsystemd0@249.11-0ubuntu3.10?arch=amd64&distro=ubuntu-22.04&upstream=systemd","type":"deb","version":"249.11-0ubuntu3.10","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsystemd0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libsystemd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"fix":{"suggestedVersion":"249.11-0ubuntu3.21"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-7008","versionConstraint":"< 249.11-0ubuntu3.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"systemd","version":"249.11-0ubuntu3.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-7008","fix":{"state":"fixed","versions":["249.11-0ubuntu3.21"],"available":[{"date":"2026-06-08","kind":"advisory","version":"249.11-0ubuntu3.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-7008","cwe":"CWE-300","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-7008","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-7008","date":"2026-10-27","epss":0.00849,"percentile":0.57934}],"risk":0.2547,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-7008"},"relatedVulnerabilities":[{"id":"CVE-2023-7008","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-7008","cwe":"CWE-300","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-7008","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-7008","date":"2026-10-27","epss":0.00849,"percentile":0.57934}],"urls":["https://access.redhat.com/errata/RHSA-2024:2463","https://access.redhat.com/errata/RHSA-2024:3203","https://access.redhat.com/security/cve/CVE-2023-7008","https://bugzilla.redhat.com/show_bug.cgi?id=2222261","https://bugzilla.redhat.com/show_bug.cgi?id=2222672","https://github.com/systemd/systemd/issues/25676","https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/","https://security.netapp.com/advisory/ntap-20241122-0004/","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-7008","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records."}]},{"artifact":{"id":"660ac8ff33e1fbb6","cpes":["cpe:2.3:a:libudev1:libudev1:249.11-0ubuntu3.10:*:*:*:*:*:*:*"],"name":"libudev1","purl":"pkg:deb/ubuntu/libudev1@249.11-0ubuntu3.10?arch=amd64&distro=ubuntu-22.04&upstream=systemd","type":"deb","version":"249.11-0ubuntu3.10","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libudev1/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libudev1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libudev1:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libudev1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"fix":{"suggestedVersion":"249.11-0ubuntu3.21"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-7008","versionConstraint":"< 249.11-0ubuntu3.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"systemd","version":"249.11-0ubuntu3.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-7008","fix":{"state":"fixed","versions":["249.11-0ubuntu3.21"],"available":[{"date":"2026-06-08","kind":"advisory","version":"249.11-0ubuntu3.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-7008","cwe":"CWE-300","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-7008","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-7008","date":"2026-10-27","epss":0.00849,"percentile":0.57934}],"risk":0.2547,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-7008"},"relatedVulnerabilities":[{"id":"CVE-2023-7008","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-7008","cwe":"CWE-300","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-7008","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-7008","date":"2026-10-27","epss":0.00849,"percentile":0.57934}],"urls":["https://access.redhat.com/errata/RHSA-2024:2463","https://access.redhat.com/errata/RHSA-2024:3203","https://access.redhat.com/security/cve/CVE-2023-7008","https://bugzilla.redhat.com/show_bug.cgi?id=2222261","https://bugzilla.redhat.com/show_bug.cgi?id=2222672","https://github.com/systemd/systemd/issues/25676","https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/","https://security.netapp.com/advisory/ntap-20241122-0004/","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-7008","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records."}]},{"artifact":{"id":"9bfa8bd71796afc6","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-24528","versionConstraint":"< 1.19.2-2ubuntu0.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-24528","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.6"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.19.2-2ubuntu0.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-24528","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-24528","date":"2026-10-27","epss":0.00507,"percentile":0.43058}],"risk":0.2535,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-24528"},"relatedVulnerabilities":[{"id":"CVE-2025-24528","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.8,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-24528","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-24528","date":"2026-10-27","epss":0.00507,"percentile":0.43058}],"urls":["https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0","https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final","https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-24528","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash."}]},{"artifact":{"id":"7570e146ba37f512","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-24528","versionConstraint":"< 1.19.2-2ubuntu0.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-24528","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.6"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.19.2-2ubuntu0.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-24528","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-24528","date":"2026-10-27","epss":0.00507,"percentile":0.43058}],"risk":0.2535,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-24528"},"relatedVulnerabilities":[{"id":"CVE-2025-24528","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.8,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-24528","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-24528","date":"2026-10-27","epss":0.00507,"percentile":0.43058}],"urls":["https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0","https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final","https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-24528","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash."}]},{"artifact":{"id":"513c46e2da3930be","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-24528","versionConstraint":"< 1.19.2-2ubuntu0.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-24528","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.6"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.19.2-2ubuntu0.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-24528","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-24528","date":"2026-10-27","epss":0.00507,"percentile":0.43058}],"risk":0.2535,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-24528"},"relatedVulnerabilities":[{"id":"CVE-2025-24528","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.8,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-24528","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-24528","date":"2026-10-27","epss":0.00507,"percentile":0.43058}],"urls":["https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0","https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final","https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-24528","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash."}]},{"artifact":{"id":"09c4acfd49c598b7","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.19.2-2ubuntu0.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-24528","versionConstraint":"< 1.19.2-2ubuntu0.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-24528","fix":{"state":"fixed","versions":["1.19.2-2ubuntu0.6"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.19.2-2ubuntu0.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-24528","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-24528","date":"2026-10-27","epss":0.00507,"percentile":0.43058}],"risk":0.2535,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-24528"},"relatedVulnerabilities":[{"id":"CVE-2025-24528","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.8,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-24528","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-24528","date":"2026-10-27","epss":0.00507,"percentile":0.43058}],"urls":["https://github.com/krb5/krb5/commit/78ceba024b64d49612375be4a12d1c066b0bfbd0","https://github.com/krb5/krb5/compare/krb5-1.21.3-final...krb5-1.22-final","https://lists.debian.org/debian-lts-announce/2025/02/msg00029.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-24528","description":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash."}]},{"artifact":{"id":"45f87362b5437c73","cpes":["cpe:2.3:a:hsiaoming_yang_\\<me_project:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:mistune:3.0.1:*:*:*:*:*:*:*"],"name":"mistune","purl":"pkg:pypi/mistune@3.0.1","type":"python","version":"3.0.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.3.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-r4rv-85jg-w4mf","versionConstraint":"<3.3.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mistune","version":"3.0.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-r4rv-85jg-w4mf","fix":{"state":"fixed","versions":["3.3.0"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"3.3.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59924","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59924","date":"2026-10-27","epss":0.00462,"percentile":0.39897}],"risk":0.25179,"urls":["https://github.com/lepture/mistune/security/advisories/GHSA-r4rv-85jg-w4mf","https://nvd.nist.gov/vuln/detail/CVE-2026-59924","https://github.com/lepture/mistune/commit/1bef343ade163fc3bb95572b15be720084cdb993","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/pypa/advisory-database/tree/main/vulns/mistune/PYSEC-2026-2212.yaml"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-r4rv-85jg-w4mf","description":"Mistune: Arbitrary File Read via Include directive path traversal"},"relatedVulnerabilities":[{"id":"CVE-2026-59924","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59924","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59924","date":"2026-10-27","epss":0.00462,"percentile":0.39897}],"urls":["https://github.com/lepture/mistune/commit/1bef343ade163fc3bb95572b15be720084cdb993","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/lepture/mistune/security/advisories/GHSA-r4rv-85jg-w4mf"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59924","description":"Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Include.parse() joins and normalizes user-supplied include paths without verifying that the result remains within the intended markdown directory, allowing crafted include paths to access files outside that directory when markdown files are processed using md.read(). This issue is fixed in version 3.3.0."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5450","versionConstraint":"< 2.35-0ubuntu3.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-5450","fix":{"state":"fixed","versions":["2.35-0ubuntu3.14"],"available":[{"date":"2026-07-27","kind":"advisory","version":"2.35-0ubuntu3.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-27","epss":0.00502,"percentile":0.42783}],"risk":0.251,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5450"},"relatedVulnerabilities":[{"id":"CVE-2026-5450","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-27","epss":0.00502,"percentile":0.42783}],"urls":["https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5450","description":"Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5450","versionConstraint":"< 2.35-0ubuntu3.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-5450","fix":{"state":"fixed","versions":["2.35-0ubuntu3.14"],"available":[{"date":"2026-07-27","kind":"advisory","version":"2.35-0ubuntu3.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-27","epss":0.00502,"percentile":0.42783}],"risk":0.251,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5450"},"relatedVulnerabilities":[{"id":"CVE-2026-5450","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-27","epss":0.00502,"percentile":0.42783}],"urls":["https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5450","description":"Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5450","versionConstraint":"< 2.35-0ubuntu3.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-5450","fix":{"state":"fixed","versions":["2.35-0ubuntu3.14"],"available":[{"date":"2026-07-27","kind":"advisory","version":"2.35-0ubuntu3.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-27","epss":0.00502,"percentile":0.42783}],"risk":0.251,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5450"},"relatedVulnerabilities":[{"id":"CVE-2026-5450","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-27","epss":0.00502,"percentile":0.42783}],"urls":["https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5450","description":"Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow."}]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.34.0-3ubuntu1.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42496","versionConstraint":"< 5.34.0-3ubuntu1.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-42496","fix":{"state":"fixed","versions":["5.34.0-3ubuntu1.7"],"available":[{"date":"2026-05-26","kind":"advisory","version":"5.34.0-3ubuntu1.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-42496","cwe":"CWE-59","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-42496","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42496","date":"2026-10-27","epss":0.00502,"percentile":0.42756}],"risk":0.251,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42496"},"relatedVulnerabilities":[{"id":"CVE-2026-42496","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.2,"impactScore":6.1,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42496","cwe":"CWE-59","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-42496","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42496","date":"2026-10-27","epss":0.00502,"percentile":0.42756}],"urls":["https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch","https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes","https://www.cve.org/CVERecord?id=CVE-2026-42497","https://access.redhat.com/errata/RHSA-2026:30851","https://access.redhat.com/errata/RHSA-2026:30852","https://access.redhat.com/errata/RHSA-2026:30856","https://access.redhat.com/errata/RHSA-2026:30857","https://access.redhat.com/security/cve/CVE-2026-42496","https://bugzilla.redhat.com/show_bug.cgi?id=2481314","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42496.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42496","description":"Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target.\n\nA subsequent open through the extracted name reads or writes the attacker chosen path."}]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.34.0-3ubuntu1.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-40909","versionConstraint":"< 5.34.0-3ubuntu1.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-40909","fix":{"state":"fixed","versions":["5.34.0-3ubuntu1.5"],"available":[{"date":"2025-07-29","kind":"advisory","version":"5.34.0-3ubuntu1.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-40909","cwe":"CWE-426","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2025-40909","cwe":"CWE-689","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2025-40909","date":"2026-10-27","epss":0.00499,"percentile":0.42574}],"risk":0.24949999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-40909"},"relatedVulnerabilities":[{"id":"CVE-2025-40909","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.9,"impactScore":3.4,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-40909","cwe":"CWE-426","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2025-40909","cwe":"CWE-689","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2025-40909","date":"2026-10-27","epss":0.00499,"percentile":0.42574}],"urls":["https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098226","https://github.com/Perl/perl5/commit/11a11ecf4bea72b17d250cfb43c897be1341861e","https://github.com/Perl/perl5/commit/918bfff86ca8d6d4e4ec5b30994451e0bd74aba9.patch","https://github.com/Perl/perl5/issues/10387","https://github.com/Perl/perl5/issues/23010","https://perldoc.perl.org/5.14.0/perl5136delta#Directory-handles-not-copied-to-threads","https://www.openwall.com/lists/oss-security/2025/05/22/2","http://seclists.org/fulldisclosure/2025/Sep/53","http://seclists.org/fulldisclosure/2025/Sep/54","http://seclists.org/fulldisclosure/2025/Sep/55","http://www.openwall.com/lists/oss-security/2025/05/23/1","http://www.openwall.com/lists/oss-security/2025/05/30/4","http://www.openwall.com/lists/oss-security/2025/06/02/2","http://www.openwall.com/lists/oss-security/2025/06/02/5","http://www.openwall.com/lists/oss-security/2025/06/02/6","http://www.openwall.com/lists/oss-security/2025/06/02/7","http://www.openwall.com/lists/oss-security/2025/06/03/1","https://lists.debian.org/debian-lts-announce/2026/04/msg00018.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-40909","description":"Perl threads have a working directory race condition where file operations may target unintended paths.\n\nIf a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running. \n\nThis may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit.\n\nThe bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6"}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-8328","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-8328","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-8328","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b2"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-05","kind":"first-observed","version":"3.15.0b2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8328","cwe":"CWE-918","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-8328","date":"2026-10-27","epss":0.00457,"percentile":0.39502}],"risk":0.24906500000000004,"urls":["https://github.com/python/cpython/commit/2bbcf3fb7a420a05605576c0f9468d4675381b5f","https://github.com/python/cpython/commit/5dadc64673ce875ebfb24163907777dae0f6ca06","https://github.com/python/cpython/commit/7d95a1dc7382b55cba7fdd6a110336077584a4f0","https://github.com/python/cpython/commit/bb3446dda6c49b32e67c11dbbbf221b40be00763","https://github.com/python/cpython/commit/c88704431ea3248ca769384c13856330976fac1d","https://github.com/python/cpython/commit/eac4fe3b2c77693790a5ef7dfab127c1fee81bf9","https://github.com/python/cpython/commit/ef12d0dc824baccf737bba1458e5eed3d1e0fceb","https://github.com/python/cpython/issues/87451","https://github.com/python/cpython/pull/149648","https://mail.python.org/archives/list/security-announce@python.org/thread/ITF2BAPBQEPYK3LDMPRSY435JGNHYNDP/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8328","description":"The ftpcp() function in Lib/ftplib.py was not updated when \nCVE-2021-4189 was fixed. While makepasv() was patched to replace \nserver-supplied PASV host addresses with the actual peer address \n(getpeername()[0]), ftpcp() still calls parse227() directly and passes \nthe raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189."},"relatedVulnerabilities":[]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.34.0-3ubuntu1.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-13221","versionConstraint":"< 5.34.0-3ubuntu1.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-13221","fix":{"state":"fixed","versions":["5.34.0-3ubuntu1.8"],"available":[{"date":"2026-08-25","kind":"advisory","version":"5.34.0-3ubuntu1.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-13221","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-13221","date":"2026-10-27","epss":0.00494,"percentile":0.42224}],"risk":0.247,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-13221"},"relatedVulnerabilities":[{"id":"CVE-2026-13221","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13221","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-13221","date":"2026-10-27","epss":0.00494,"percentile":0.42224}],"urls":["https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch","https://github.com/Perl/perl5/issues/23388","http://www.openwall.com/lists/oss-security/2026/07/13/5"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13221","description":"Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.\n\nWhen such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error.\n\nA pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong."}]},{"artifact":{"id":"c0b145b45a6f9d3f","cpes":["cpe:2.3:a:wget:wget:1.21.2-2ubuntu1:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/ubuntu/wget@1.21.2-2ubuntu1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"1.21.2-2ubuntu1","language":"","licenses":["sha256:c58cb5a2d94f35f0e9b0f1a038d48b73477aa12782ff17328c21d8a86f5f99d5"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.21.2-2ubuntu1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-58469","versionConstraint":"< 1.21.2-2ubuntu1.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"wget","version":"1.21.2-2ubuntu1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-58469","fix":{"state":"fixed","versions":["1.21.2-2ubuntu1.3"],"available":[{"date":"2026-07-14","kind":"advisory","version":"1.21.2-2ubuntu1.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-58469","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58469","date":"2026-10-27","epss":0.00493,"percentile":0.42158}],"risk":0.24650000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58469"},"relatedVulnerabilities":[{"id":"CVE-2026-58469","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58469","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58469","date":"2026-10-27","epss":0.00493,"percentile":0.42158}],"urls":["https://gitlab.com/gnuwget/wget/-/commit/37a40fcb450153f69537c7cbc2a7a4fb0b6f7826","https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-underread-via-metalink-url-parsing"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58469","description":"GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.13"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15281","versionConstraint":"< 2.35-0ubuntu3.13 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-15281","fix":{"state":"fixed","versions":["2.35-0ubuntu3.13"],"available":[{"date":"2026-02-03","kind":"advisory","version":"2.35-0ubuntu3.13"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-15281","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-15281","date":"2026-10-27","epss":0.00491,"percentile":0.4202}],"risk":0.24550000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-15281"},"relatedVulnerabilities":[{"id":"CVE-2025-15281","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15281","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-15281","date":"2026-10-27","epss":0.00491,"percentile":0.4202}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33814","http://www.openwall.com/lists/oss-security/2026/01/20/3"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15281","description":"Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.13"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15281","versionConstraint":"< 2.35-0ubuntu3.13 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-15281","fix":{"state":"fixed","versions":["2.35-0ubuntu3.13"],"available":[{"date":"2026-02-03","kind":"advisory","version":"2.35-0ubuntu3.13"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-15281","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-15281","date":"2026-10-27","epss":0.00491,"percentile":0.4202}],"risk":0.24550000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-15281"},"relatedVulnerabilities":[{"id":"CVE-2025-15281","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15281","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-15281","date":"2026-10-27","epss":0.00491,"percentile":0.4202}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33814","http://www.openwall.com/lists/oss-security/2026/01/20/3"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15281","description":"Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.13"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15281","versionConstraint":"< 2.35-0ubuntu3.13 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-15281","fix":{"state":"fixed","versions":["2.35-0ubuntu3.13"],"available":[{"date":"2026-02-03","kind":"advisory","version":"2.35-0ubuntu3.13"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-15281","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-15281","date":"2026-10-27","epss":0.00491,"percentile":0.4202}],"risk":0.24550000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-15281"},"relatedVulnerabilities":[{"id":"CVE-2025-15281","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15281","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-15281","date":"2026-10-27","epss":0.00491,"percentile":0.4202}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33814","http://www.openwall.com/lists/oss-security/2026/01/20/3"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15281","description":"Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process."}]},{"artifact":{"id":"68c22762fa045f2f","cpes":["cpe:2.3:a:tar:tar:1.34\\+dfsg-1ubuntu0.1.22.04.1:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:deb/ubuntu/tar@1.34%2Bdfsg-1ubuntu0.1.22.04.1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"1.34+dfsg-1ubuntu0.1.22.04.1","language":"","licenses":["sha256:5e07fa97dc98e502dc15d09d4c14647ec77509f949267a30d1341cadf84d629f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/tar/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/tar/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/tar.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/tar.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/tar.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/tar.list"},{"path":"/var/lib/dpkg/info/tar.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/tar.postinst"},{"path":"/var/lib/dpkg/info/tar.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/tar.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.34+dfsg-1ubuntu0.1.22.04.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-45582","versionConstraint":"< 1.34+dfsg-1ubuntu0.1.22.04.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"tar","version":"1.34+dfsg-1ubuntu0.1.22.04.1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-45582","fix":{"state":"fixed","versions":["1.34+dfsg-1ubuntu0.1.22.04.4"],"available":[{"date":"2026-07-06","kind":"advisory","version":"1.34+dfsg-1ubuntu0.1.22.04.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-45582","cwe":"CWE-24","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-45582","date":"2026-10-27","epss":0.0049,"percentile":0.41943}],"risk":0.245,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-45582"},"relatedVulnerabilities":[{"id":"CVE-2025-45582","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L","metrics":{"baseScore":4.1,"impactScore":2.8,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-45582","cwe":"CWE-24","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-45582","date":"2026-10-27","epss":0.0049,"percentile":0.41943}],"urls":["https://github.com/i900008/vulndb/blob/main/Gnu_tar_vuln.md","https://lists.gnu.org/archive/html/bug-tar/2025-08/msg00012.html","https://www.gnu.org/software/tar/","https://www.gnu.org/software/tar/manual/html_node/Integrity.html","https://www.gnu.org/software/tar/manual/html_node/Security-rules-of-thumb.html","http://www.openwall.com/lists/oss-security/2025/11/01/6"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-45582","description":"GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file, specified via a relative pathname that begins with the symlink name and ends with that critical file's name. Here, the extraction follows the symlink and overwrites the critical file. This bypasses the protection mechanism of \"Member name contains '..'\" that would occur for a single TAR archive that attempted to specify the critical file via a ../ approach. For example, the first archive can contain \"x -> ../../../../../home/victim/.ssh\" and the second archive can contain x/authorized_keys. This can affect server applications that automatically extract any number of user-supplied TAR archives, and were relying on the blocking of traversal. This can also affect software installation processes in which \"tar xf\" is run more than once (e.g., when installing a package can automatically install two dependencies that are set up as untrusted tarballs instead of official packages). NOTE: the official GNU Tar manual has an otherwise-empty directory for each \"tar xf\" in its Security Rules of Thumb; however, third-party advice leads users to run \"tar xf\" more than once into the same directory."}]},{"artifact":{"id":"fa287c7bb04e1dbb","cpes":["cpe:2.3:a:python:urllib3:2.0.7:*:*:*:*:*:*:*"],"name":"urllib3","purl":"pkg:pypi/urllib3@2.0.7","type":"python","version":"2.0.7","language":"python","licenses":[],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.5.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-pq67-6m6q-mj2v","versionConstraint":"<2.5.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"urllib3","version":"2.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-pq67-6m6q-mj2v","fix":{"state":"fixed","versions":["2.5.0"],"available":[{"date":"2025-06-19","kind":"first-observed","version":"2.5.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-50181","cwe":"CWE-601","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-50181","date":"2026-10-27","epss":0.00474,"percentile":0.40778}],"risk":0.24411000000000002,"urls":["https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v","https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857","https://nvd.nist.gov/vuln/detail/CVE-2025-50181","https://github.com/urllib3/urllib3/releases/tag/2.5.0"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-pq67-6m6q-mj2v","description":"urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation"},"relatedVulnerabilities":[{"id":"CVE-2025-50181","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-50181","cwe":"CWE-601","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-50181","date":"2026-10-27","epss":0.00474,"percentile":0.40778}],"urls":["https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857","https://github.com/urllib3/urllib3/releases/tag/2.5.0","https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-50181","description":"urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An application attempting to mitigate SSRF or open redirect vulnerabilities by disabling redirects at the PoolManager level will remain vulnerable. This issue has been patched in version 2.5.0."}]},{"artifact":{"id":"b45b4832d770f70d","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter_server:2.8.0:*:*:*:*:*:*:*"],"name":"jupyter-server","purl":"pkg:pypi/jupyter-server@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.18.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5mrq-x3x5-8v8f","versionConstraint":"<=2.17.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyter-server","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-5mrq-x3x5-8v8f","fix":{"state":"fixed","versions":["2.18.0"],"available":[{"date":"2026-05-06","kind":"first-observed","version":"2.18.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40934","cwe":"CWE-613","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-40934","date":"2026-10-27","epss":0.00332,"percentile":0.26298}],"risk":0.24402000000000001,"urls":["https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-5mrq-x3x5-8v8f","https://nvd.nist.gov/vuln/detail/CVE-2026-40934","https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server/PYSEC-2026-69.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5mrq-x3x5-8v8f","description":"Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart"},"relatedVulnerabilities":[{"id":"CVE-2026-40934","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40934","cwe":"CWE-613","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-40934","date":"2026-10-27","epss":0.00332,"percentile":0.26298}],"urls":["https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-5mrq-x3x5-8v8f"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40934","description":"Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication cookies is persisted to a static file at ~/.local/share/jupyter/runtime/jupyter_cookie_secret and is never rotated when a user changes their password. After a password reset and server restart, any previously issued authentication cookie remains cryptographically valid because the signing key has not changed. An attacker who has captured a session cookie through any means retains full authenticated access to the server regardless of subsequent password changes. This affects deployments using password-based authentication, particularly shared or public-facing servers where credential rotation is expected to revoke existing sessions. This issue has been fixed in version 2.18.0."}]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.34.0-3ubuntu1.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8376","versionConstraint":"< 5.34.0-3ubuntu1.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-8376","fix":{"state":"fixed","versions":["5.34.0-3ubuntu1.7"],"available":[{"date":"2026-05-26","kind":"advisory","version":"5.34.0-3ubuntu1.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-8376","cwe":"CWE-680","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-8376","date":"2026-10-27","epss":0.00486,"percentile":0.41683}],"risk":0.243,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-8376"},"relatedVulnerabilities":[{"id":"CVE-2026-8376","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8376","cwe":"CWE-680","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-8376","date":"2026-10-27","epss":0.00486,"percentile":0.41683}],"urls":["https://github.com/Perl/perl5/commit/5e7f119eb2bb1181be908701f22bf7068e722f1c.patch","http://www.openwall.com/lists/oss-security/2026/05/26/1"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8376","description":"Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.\n\nPerl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer.\n\nA caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.23"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28389","versionConstraint":"< 3.0.2-0ubuntu1.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-28389","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.23"],"available":[{"date":"2026-04-08","kind":"advisory","version":"3.0.2-0ubuntu1.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-27","epss":0.00805,"percentile":0.56553}],"risk":0.2415,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28389"},"relatedVulnerabilities":[{"id":"CVE-2026-28389","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-27","epss":0.00805,"percentile":0.56553}],"urls":["https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5","https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616","https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f","https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a","https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28389","description":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.23"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28390","versionConstraint":"< 3.0.2-0ubuntu1.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-28390","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.23"],"available":[{"date":"2026-04-08","kind":"advisory","version":"3.0.2-0ubuntu1.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-28390","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28390","date":"2026-10-27","epss":0.00805,"percentile":0.56553}],"risk":0.2415,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28390"},"relatedVulnerabilities":[{"id":"CVE-2026-28390","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28390","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28390","date":"2026-10-27","epss":0.00805,"percentile":0.56553}],"urls":["https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc","https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6","https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4","https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788","https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28390","description":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.23"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28389","versionConstraint":"< 3.0.2-0ubuntu1.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-28389","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.23"],"available":[{"date":"2026-04-08","kind":"advisory","version":"3.0.2-0ubuntu1.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-27","epss":0.00805,"percentile":0.56553}],"risk":0.2415,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28389"},"relatedVulnerabilities":[{"id":"CVE-2026-28389","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-27","epss":0.00805,"percentile":0.56553}],"urls":["https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5","https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616","https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f","https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a","https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28389","description":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.23"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28390","versionConstraint":"< 3.0.2-0ubuntu1.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-28390","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.23"],"available":[{"date":"2026-04-08","kind":"advisory","version":"3.0.2-0ubuntu1.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-28390","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28390","date":"2026-10-27","epss":0.00805,"percentile":0.56553}],"risk":0.2415,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28390"},"relatedVulnerabilities":[{"id":"CVE-2026-28390","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28390","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28390","date":"2026-10-27","epss":0.00805,"percentile":0.56553}],"urls":["https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc","https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6","https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4","https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788","https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28390","description":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7383","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-7383","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-7383","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-7383","date":"2026-10-27","epss":0.00804,"percentile":0.56535}],"risk":0.2412,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-7383"},"relatedVulnerabilities":[{"id":"CVE-2026-7383","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7383","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-7383","date":"2026-10-27","epss":0.00804,"percentile":0.56535}],"urls":["https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6","https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74","https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974","https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083","https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7383","description":"Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-7383","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-7383","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-7383","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-7383","date":"2026-10-27","epss":0.00804,"percentile":0.56535}],"risk":0.2412,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-7383"},"relatedVulnerabilities":[{"id":"CVE-2026-7383","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7383","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-7383","date":"2026-10-27","epss":0.00804,"percentile":0.56535}],"urls":["https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6","https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74","https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974","https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083","https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7383","description":"Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.8"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-6597","versionConstraint":"< 3.8.19||>= 3.10.0, < 3.10.14||>= 3.11.0, < 3.11.8||>= 3.12.0, < 3.12.1||>= 3.13.0a1, < 3.13.0a3||>= 3.9.0, < 3.9.19 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.8"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-6597","versionConstraint":"< 3.8.19||>= 3.10.0, < 3.10.14||>= 3.11.0, < 3.11.8||>= 3.12.0, < 3.12.1||>= 3.13.0a1, < 3.13.0a3||>= 3.9.0, < 3.9.19 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-6597","fix":{"state":"fixed","versions":["3.8.19","3.9.19","3.10.14","3.11.8","3.12.1","3.13.0a3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.19"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.8"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.1"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0a3"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.19"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.19"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.14"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.8"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.1"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0a3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.19"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","metrics":{"baseScore":7.8,"impactScore":5.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-6597","date":"2026-10-27","epss":0.00313,"percentile":0.2405}],"risk":0.23944500000000002,"urls":["http://www.openwall.com/lists/oss-security/2024/03/20/5","https://github.com/python/cpython/commit/02a9259c717738dfe6b463c44d7e17f2b6d2cb3a","https://github.com/python/cpython/commit/5585334d772b253a01a6730e8202ffb1607c3d25","https://github.com/python/cpython/commit/6ceb8aeda504b079fef7a57b8d81472f15cdd9a5","https://github.com/python/cpython/commit/81c16cd94ec38d61aa478b9a452436dc3b1b524d","https://github.com/python/cpython/commit/8eaeefe49d179ca4908d052745e3bb8b6f238f82","https://github.com/python/cpython/commit/d54e22a669ae6e987199bb5d2c69bb5a46b0083b","https://github.com/python/cpython/issues/91133","https://lists.debian.org/debian-lts-announce/2024/03/msg00025.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T3IGRX54M7RNCQOXVQO5KQKTGWCOABIM/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5VHWS52HGD743C47UMCSAK2A773M2YE/","https://mail.python.org/archives/list/security-announce@python.org/thread/Q5C6ATFC67K53XFV4KE45325S7NS62LD/","https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6597","description":"An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.\n\nThe tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances."},"relatedVulnerabilities":[]},{"artifact":{"id":"4bd0adec6e7440e1","cpes":["cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:node.js:*:*","cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:rust:*:*","cpe:2.3:a:isaacs:tar:6.1.15:*:*:*:*:node.js:*:*"],"name":"tar","purl":"pkg:npm/tar@6.1.15","type":"npm","version":"6.1.15","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-83g3-92jg-28cx","versionConstraint":"<7.5.8 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"tar","version":"6.1.15"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-83g3-92jg-28cx","fix":{"state":"fixed","versions":["7.5.8"],"available":[{"date":"2026-03-04","kind":"first-observed","version":"7.5.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26960","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-26960","date":"2026-10-27","epss":0.00328,"percentile":0.25808}],"risk":0.23944000000000001,"urls":["https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx","https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384","https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f","https://nvd.nist.gov/vuln/detail/CVE-2026-26960"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-83g3-92jg-28cx","description":"Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction"},"relatedVulnerabilities":[{"id":"CVE-2026-26960","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26960","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-26960","date":"2026-10-27","epss":0.00328,"percentile":0.25808}],"urls":["https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384","https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f","https://github.com/isaacs/node-tar/security/advisories/GHSA-83g3-92jg-28cx"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-26960","description":"node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outside the extraction root, enabling arbitrary file read and write as the extracting user. Severity is high because the primitive bypasses path protections and turns archive extraction into a direct filesystem access primitive. This issue has been fixed in version 7.5.8."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42011","versionConstraint":"< 3.7.3-4ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-42011","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.9"],"available":[{"date":"2026-05-20","kind":"advisory","version":"3.7.3-4ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-42011","cwe":"CWE-295","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42011","date":"2026-10-27","epss":0.00475,"percentile":0.40872}],"risk":0.2375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42011"},"relatedVulnerabilities":[{"id":"CVE-2026-42011","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42011","cwe":"CWE-295","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42011","date":"2026-10-27","epss":0.00475,"percentile":0.40872}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-42011","https://bugzilla.redhat.com/show_bug.cgi?id=2467437","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42011","description":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems."}]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.34.0-3ubuntu1.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-57433","versionConstraint":"< 5.34.0-3ubuntu1.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-57433","fix":{"state":"fixed","versions":["5.34.0-3ubuntu1.8"],"available":[{"date":"2026-08-25","kind":"advisory","version":"5.34.0-3ubuntu1.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-57433","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-57433","date":"2026-10-27","epss":0.00475,"percentile":0.40867}],"risk":0.2375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-57433"},"relatedVulnerabilities":[{"id":"CVE-2026-57433","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-57433","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-57433","date":"2026-10-27","epss":0.00475,"percentile":0.40867}],"urls":["https://github.com/Perl/perl5/commit/e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.patch","http://www.openwall.com/lists/oss-security/2026/07/13/7"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-57433","description":"Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record.\n\nretrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value.\n\nA crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization."}]},{"artifact":{"id":"b45b4832d770f70d","cpes":["cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter_project:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyterproject:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-development-team-\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_\\<jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter-server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_server:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyter_server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter-server:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyter_server:2.8.0:*:*:*:*:*:*:*"],"name":"jupyter-server","purl":"pkg:pypi/jupyter-server@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyter_server-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.18.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-24qx-w28j-9m6p","versionConstraint":"<=2.17.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyter-server","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-24qx-w28j-9m6p","fix":{"state":"fixed","versions":["2.18.0"],"available":[{"date":"2026-05-06","kind":"first-observed","version":"2.18.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40110","cwe":"CWE-777","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-40110","cwe":"CWE-625","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-40110","date":"2026-10-27","epss":0.00313,"percentile":0.2405}],"risk":0.236315,"urls":["https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-24qx-w28j-9m6p","https://nvd.nist.gov/vuln/detail/CVE-2026-40110","https://github.com/jupyter-server/jupyter_server/pull/603","https://github.com/jupyter-server/jupyter_server/commit/057869a327c46730afede3eab0ca2d2e3e74acea","https://github.com/jupyter-server/jupyter_server/commit/49b34392feaa97735b3b777e3baf8f22f2a14ed8","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/security/cve/CVE-2026-40110","https://bugzilla.redhat.com/show_bug.cgi?id=2466912","https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server/PYSEC-2026-2187.yaml","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40110.json"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-24qx-w28j-9m6p","description":"Jupyter Server has a  CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`"},"relatedVulnerabilities":[{"id":"CVE-2026-40110","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.3,"impactScore":5.2,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40110","cwe":"CWE-777","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-40110","cwe":"CWE-625","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-40110","date":"2026-10-27","epss":0.00313,"percentile":0.2405}],"urls":["https://github.com/jupyter-server/jupyter_server/commit/057869a327c46730afede3eab0ca2d2e3e74acea","https://github.com/jupyter-server/jupyter_server/commit/49b34392feaa97735b3b777e3baf8f22f2a14ed8","https://github.com/jupyter-server/jupyter_server/pull/603","https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-24qx-w28j-9m6p","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/security/cve/CVE-2026-40110","https://bugzilla.redhat.com/show_bug.cgi?id=2466912","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40110.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40110","description":"Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against the allow_origin_pat configuration value. Because re.match() only anchors at the start of the string and does not require a full match, a pattern intended to match only a trusted domain (e.g., trusted.example.com) will also match any origin that begins with that domain followed by additional characters (e.g., trusted.example.com.evil.com). An attacker who controls such a domain can bypass the CORS origin restriction and make cross-origin requests to the Jupyter Server API from an untrusted site. This issue has been fixed in version 2.18.0."}]},{"artifact":{"id":"39295f99fcd44178","cpes":["cpe:2.3:a:libpam-modules:libpam-modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam-modules:libpam_modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules:libpam-modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules:libpam_modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam-modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam_modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*"],"name":"libpam-modules","purl":"pkg:deb/ubuntu/libpam-modules@1.4.0-11ubuntu2.3?arch=amd64&distro=ubuntu-22.04&upstream=pam","type":"deb","version":"1.4.0-11ubuntu2.3","language":"","licenses":["sha256:7c584b7b1f37b612da7fdf3b076eb2b2c1bae72865f0699d745ae2ac7d40d13e"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpam-modules/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libpam-modules/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-modules:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-modules:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-modules:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-modules:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"pam"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.4.0-11ubuntu2.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-6020","versionConstraint":"< 1.4.0-11ubuntu2.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pam","version":"1.4.0-11ubuntu2.3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-6020","fix":{"state":"fixed","versions":["1.4.0-11ubuntu2.6"],"available":[{"date":"2025-06-18","kind":"advisory","version":"1.4.0-11ubuntu2.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-6020","cwe":"CWE-22","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-6020","date":"2026-10-27","epss":0.00472,"percentile":0.40613}],"risk":0.23600000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-6020"},"relatedVulnerabilities":[{"id":"CVE-2025-6020","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6020","cwe":"CWE-22","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-6020","date":"2026-10-27","epss":0.00472,"percentile":0.40613}],"urls":["https://access.redhat.com/errata/RHSA-2025:10024","https://access.redhat.com/errata/RHSA-2025:10027","https://access.redhat.com/errata/RHSA-2025:10180","https://access.redhat.com/errata/RHSA-2025:10354","https://access.redhat.com/errata/RHSA-2025:10357","https://access.redhat.com/errata/RHSA-2025:10358","https://access.redhat.com/errata/RHSA-2025:10359","https://access.redhat.com/errata/RHSA-2025:10361","https://access.redhat.com/errata/RHSA-2025:10362","https://access.redhat.com/errata/RHSA-2025:10735","https://access.redhat.com/errata/RHSA-2025:10823","https://access.redhat.com/errata/RHSA-2025:11386","https://access.redhat.com/errata/RHSA-2025:11487","https://access.redhat.com/errata/RHSA-2025:14557","https://access.redhat.com/errata/RHSA-2025:15099","https://access.redhat.com/errata/RHSA-2025:15709","https://access.redhat.com/errata/RHSA-2025:15827","https://access.redhat.com/errata/RHSA-2025:15828","https://access.redhat.com/errata/RHSA-2025:16524","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:18219","https://access.redhat.com/errata/RHSA-2025:20181","https://access.redhat.com/errata/RHSA-2025:21885","https://access.redhat.com/errata/RHSA-2025:22019","https://access.redhat.com/errata/RHSA-2025:9526","https://access.redhat.com/errata/RHSA-2026:0934","https://access.redhat.com/security/cve/CVE-2025-6020","https://bugzilla.redhat.com/show_bug.cgi?id=2372512","https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx","http://www.openwall.com/lists/oss-security/2025/06/17/1","https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-6020","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions."}]},{"artifact":{"id":"27e0bbb671d38fed","cpes":["cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam-modules-bin:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules_bin:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules_bin:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam-modules:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam-modules:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*"],"name":"libpam-modules-bin","purl":"pkg:deb/ubuntu/libpam-modules-bin@1.4.0-11ubuntu2.3?arch=amd64&distro=ubuntu-22.04&upstream=pam","type":"deb","version":"1.4.0-11ubuntu2.3","language":"","licenses":["sha256:7c584b7b1f37b612da7fdf3b076eb2b2c1bae72865f0699d745ae2ac7d40d13e"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpam-modules-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libpam-modules-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-modules-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-modules-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-modules-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-modules-bin.list"}],"upstreams":[{"name":"pam"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.4.0-11ubuntu2.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-6020","versionConstraint":"< 1.4.0-11ubuntu2.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pam","version":"1.4.0-11ubuntu2.3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-6020","fix":{"state":"fixed","versions":["1.4.0-11ubuntu2.6"],"available":[{"date":"2025-06-18","kind":"advisory","version":"1.4.0-11ubuntu2.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-6020","cwe":"CWE-22","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-6020","date":"2026-10-27","epss":0.00472,"percentile":0.40613}],"risk":0.23600000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-6020"},"relatedVulnerabilities":[{"id":"CVE-2025-6020","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6020","cwe":"CWE-22","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-6020","date":"2026-10-27","epss":0.00472,"percentile":0.40613}],"urls":["https://access.redhat.com/errata/RHSA-2025:10024","https://access.redhat.com/errata/RHSA-2025:10027","https://access.redhat.com/errata/RHSA-2025:10180","https://access.redhat.com/errata/RHSA-2025:10354","https://access.redhat.com/errata/RHSA-2025:10357","https://access.redhat.com/errata/RHSA-2025:10358","https://access.redhat.com/errata/RHSA-2025:10359","https://access.redhat.com/errata/RHSA-2025:10361","https://access.redhat.com/errata/RHSA-2025:10362","https://access.redhat.com/errata/RHSA-2025:10735","https://access.redhat.com/errata/RHSA-2025:10823","https://access.redhat.com/errata/RHSA-2025:11386","https://access.redhat.com/errata/RHSA-2025:11487","https://access.redhat.com/errata/RHSA-2025:14557","https://access.redhat.com/errata/RHSA-2025:15099","https://access.redhat.com/errata/RHSA-2025:15709","https://access.redhat.com/errata/RHSA-2025:15827","https://access.redhat.com/errata/RHSA-2025:15828","https://access.redhat.com/errata/RHSA-2025:16524","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:18219","https://access.redhat.com/errata/RHSA-2025:20181","https://access.redhat.com/errata/RHSA-2025:21885","https://access.redhat.com/errata/RHSA-2025:22019","https://access.redhat.com/errata/RHSA-2025:9526","https://access.redhat.com/errata/RHSA-2026:0934","https://access.redhat.com/security/cve/CVE-2025-6020","https://bugzilla.redhat.com/show_bug.cgi?id=2372512","https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx","http://www.openwall.com/lists/oss-security/2025/06/17/1","https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-6020","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions."}]},{"artifact":{"id":"796e87c8700d1668","cpes":["cpe:2.3:a:libpam-runtime:libpam-runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam-runtime:libpam_runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_runtime:libpam-runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_runtime:libpam_runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam-runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam_runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*"],"name":"libpam-runtime","purl":"pkg:deb/ubuntu/libpam-runtime@1.4.0-11ubuntu2.3?arch=all&distro=ubuntu-22.04&upstream=pam","type":"deb","version":"1.4.0-11ubuntu2.3","language":"","licenses":["sha256:7c584b7b1f37b612da7fdf3b076eb2b2c1bae72865f0699d745ae2ac7d40d13e"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpam-runtime/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libpam-runtime/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-runtime.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-runtime.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-runtime.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.list"},{"path":"/var/lib/dpkg/info/libpam-runtime.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.postinst"},{"path":"/var/lib/dpkg/info/libpam-runtime.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.postrm"},{"path":"/var/lib/dpkg/info/libpam-runtime.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.prerm"},{"path":"/var/lib/dpkg/info/libpam-runtime.templates","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.templates"}],"upstreams":[{"name":"pam"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.4.0-11ubuntu2.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-6020","versionConstraint":"< 1.4.0-11ubuntu2.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pam","version":"1.4.0-11ubuntu2.3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-6020","fix":{"state":"fixed","versions":["1.4.0-11ubuntu2.6"],"available":[{"date":"2025-06-18","kind":"advisory","version":"1.4.0-11ubuntu2.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-6020","cwe":"CWE-22","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-6020","date":"2026-10-27","epss":0.00472,"percentile":0.40613}],"risk":0.23600000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-6020"},"relatedVulnerabilities":[{"id":"CVE-2025-6020","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6020","cwe":"CWE-22","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-6020","date":"2026-10-27","epss":0.00472,"percentile":0.40613}],"urls":["https://access.redhat.com/errata/RHSA-2025:10024","https://access.redhat.com/errata/RHSA-2025:10027","https://access.redhat.com/errata/RHSA-2025:10180","https://access.redhat.com/errata/RHSA-2025:10354","https://access.redhat.com/errata/RHSA-2025:10357","https://access.redhat.com/errata/RHSA-2025:10358","https://access.redhat.com/errata/RHSA-2025:10359","https://access.redhat.com/errata/RHSA-2025:10361","https://access.redhat.com/errata/RHSA-2025:10362","https://access.redhat.com/errata/RHSA-2025:10735","https://access.redhat.com/errata/RHSA-2025:10823","https://access.redhat.com/errata/RHSA-2025:11386","https://access.redhat.com/errata/RHSA-2025:11487","https://access.redhat.com/errata/RHSA-2025:14557","https://access.redhat.com/errata/RHSA-2025:15099","https://access.redhat.com/errata/RHSA-2025:15709","https://access.redhat.com/errata/RHSA-2025:15827","https://access.redhat.com/errata/RHSA-2025:15828","https://access.redhat.com/errata/RHSA-2025:16524","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:18219","https://access.redhat.com/errata/RHSA-2025:20181","https://access.redhat.com/errata/RHSA-2025:21885","https://access.redhat.com/errata/RHSA-2025:22019","https://access.redhat.com/errata/RHSA-2025:9526","https://access.redhat.com/errata/RHSA-2026:0934","https://access.redhat.com/security/cve/CVE-2025-6020","https://bugzilla.redhat.com/show_bug.cgi?id=2372512","https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx","http://www.openwall.com/lists/oss-security/2025/06/17/1","https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-6020","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions."}]},{"artifact":{"id":"6472f47572510566","cpes":["cpe:2.3:a:libpam0g:libpam0g:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*"],"name":"libpam0g","purl":"pkg:deb/ubuntu/libpam0g@1.4.0-11ubuntu2.3?arch=amd64&distro=ubuntu-22.04&upstream=pam","type":"deb","version":"1.4.0-11ubuntu2.3","language":"","licenses":["sha256:7c584b7b1f37b612da7fdf3b076eb2b2c1bae72865f0699d745ae2ac7d40d13e"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpam0g/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libpam0g/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam0g:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam0g:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"pam"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.4.0-11ubuntu2.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-6020","versionConstraint":"< 1.4.0-11ubuntu2.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pam","version":"1.4.0-11ubuntu2.3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-6020","fix":{"state":"fixed","versions":["1.4.0-11ubuntu2.6"],"available":[{"date":"2025-06-18","kind":"advisory","version":"1.4.0-11ubuntu2.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-6020","cwe":"CWE-22","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-6020","date":"2026-10-27","epss":0.00472,"percentile":0.40613}],"risk":0.23600000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-6020"},"relatedVulnerabilities":[{"id":"CVE-2025-6020","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6020","cwe":"CWE-22","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-6020","date":"2026-10-27","epss":0.00472,"percentile":0.40613}],"urls":["https://access.redhat.com/errata/RHSA-2025:10024","https://access.redhat.com/errata/RHSA-2025:10027","https://access.redhat.com/errata/RHSA-2025:10180","https://access.redhat.com/errata/RHSA-2025:10354","https://access.redhat.com/errata/RHSA-2025:10357","https://access.redhat.com/errata/RHSA-2025:10358","https://access.redhat.com/errata/RHSA-2025:10359","https://access.redhat.com/errata/RHSA-2025:10361","https://access.redhat.com/errata/RHSA-2025:10362","https://access.redhat.com/errata/RHSA-2025:10735","https://access.redhat.com/errata/RHSA-2025:10823","https://access.redhat.com/errata/RHSA-2025:11386","https://access.redhat.com/errata/RHSA-2025:11487","https://access.redhat.com/errata/RHSA-2025:14557","https://access.redhat.com/errata/RHSA-2025:15099","https://access.redhat.com/errata/RHSA-2025:15709","https://access.redhat.com/errata/RHSA-2025:15827","https://access.redhat.com/errata/RHSA-2025:15828","https://access.redhat.com/errata/RHSA-2025:16524","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:18219","https://access.redhat.com/errata/RHSA-2025:20181","https://access.redhat.com/errata/RHSA-2025:21885","https://access.redhat.com/errata/RHSA-2025:22019","https://access.redhat.com/errata/RHSA-2025:9526","https://access.redhat.com/errata/RHSA-2026:0934","https://access.redhat.com/security/cve/CVE-2025-6020","https://bugzilla.redhat.com/show_bug.cgi?id=2372512","https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx","http://www.openwall.com/lists/oss-security/2025/06/17/1","https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-6020","description":"A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions."}]},{"artifact":{"id":"fa287c7bb04e1dbb","cpes":["cpe:2.3:a:python:urllib3:2.0.7:*:*:*:*:*:*:*"],"name":"urllib3","purl":"pkg:pypi/urllib3@2.0.7","type":"python","version":"2.0.7","language":"python","licenses":[],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/urllib3-2.0.7.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.7.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qccp-gfcp-xxvc","versionConstraint":">=1.23,<2.7.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"urllib3","version":"2.0.7"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-qccp-gfcp-xxvc","fix":{"state":"fixed","versions":["2.7.0"],"available":[{"date":"2026-05-11","kind":"first-observed","version":"2.7.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-44431","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-44431","date":"2026-10-27","epss":0.00331,"percentile":0.26145}],"risk":0.23583750000000003,"urls":["https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc","https://nvd.nist.gov/vuln/detail/CVE-2026-44431"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qccp-gfcp-xxvc","description":"urllib3: Sensitive headers forwarded across origins in proxied low-level redirects"},"relatedVulnerabilities":[{"id":"CVE-2026-44431","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-44431","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-44431","date":"2026-10-27","epss":0.00331,"percentile":0.26145}],"urls":["https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc","https://lists.debian.org/debian-lts-announce/2026/06/msg00040.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-44431","description":"urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.13.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15366","versionConstraint":"< 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.13.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15366","versionConstraint":"< 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-15366","fix":{"state":"fixed","versions":["3.13.15","3.14.7","3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-08-12","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-12","kind":"first-observed","version":"3.14.7"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15366","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15366","date":"2026-10-27","epss":0.00431,"percentile":0.37214}],"risk":0.234895,"urls":["https://github.com/python/cpython/commit/298182272a740ce2016aee2f54acbd0bba1944c1","https://github.com/python/cpython/commit/6262704b134db2a4ba12e85ecfbd968534f28b45","https://github.com/python/cpython/commit/71926d943c05bde79bd2a866933103541d91b6a2","https://github.com/python/cpython/commit/d0921efb665aff26b378f495e5ff84f7e3fe649d","https://github.com/python/cpython/commit/f2cd7ef89aa8a0dcbc7283bbd39548b76f2a736a","https://github.com/python/cpython/issues/143921","https://github.com/python/cpython/pull/143922","https://mail.python.org/archives/list/security-announce@python.org/thread/DD7C7JZJYTBXMDOWKCEIEBJLBRU64OMR/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15366","description":"The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters."},"relatedVulnerabilities":[]},{"artifact":{"id":"2fe7e329ba1a83a5","cpes":["cpe:2.3:a:zlib1g:zlib1g:1\\:1.2.11.dfsg-2ubuntu9.2:*:*:*:*:*:*:*"],"name":"zlib1g","purl":"pkg:deb/ubuntu/zlib1g@1%3A1.2.11.dfsg-2ubuntu9.2?arch=amd64&distro=ubuntu-22.04&upstream=zlib","type":"deb","version":"1:1.2.11.dfsg-2ubuntu9.2","language":"","licenses":["Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/zlib1g/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/zlib1g/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/zlib1g:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/zlib1g:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"zlib"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-85091","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"zlib","version":"1:1.2.11.dfsg-2ubuntu9.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-85091","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-85091","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-85091","date":"2026-10-27","epss":0.00469,"percentile":0.40386}],"risk":0.2345,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-85091"},"relatedVulnerabilities":[{"id":"CVE-2026-85091","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85091","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-85091","date":"2026-10-27","epss":0.00469,"percentile":0.40386}],"urls":["https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490","https://github.com/madler/zlib","https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393","https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-85091","description":"zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary."}]},{"artifact":{"id":"39295f99fcd44178","cpes":["cpe:2.3:a:libpam-modules:libpam-modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam-modules:libpam_modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules:libpam-modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules:libpam_modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam-modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam_modules:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*"],"name":"libpam-modules","purl":"pkg:deb/ubuntu/libpam-modules@1.4.0-11ubuntu2.3?arch=amd64&distro=ubuntu-22.04&upstream=pam","type":"deb","version":"1.4.0-11ubuntu2.3","language":"","licenses":["sha256:7c584b7b1f37b612da7fdf3b076eb2b2c1bae72865f0699d745ae2ac7d40d13e"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpam-modules/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libpam-modules/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-modules:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-modules:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-modules:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-modules:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"pam"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.4.0-11ubuntu2.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-22365","versionConstraint":"< 1.4.0-11ubuntu2.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pam","version":"1.4.0-11ubuntu2.3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-22365","fix":{"state":"fixed","versions":["1.4.0-11ubuntu2.4"],"available":[{"date":"2024-01-17","kind":"advisory","version":"1.4.0-11ubuntu2.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-22365","cwe":"CWE-664","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22365","date":"2026-10-27","epss":0.00459,"percentile":0.39589}],"risk":0.2295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-22365"},"relatedVulnerabilities":[{"id":"CVE-2024-22365","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22365","cwe":"CWE-664","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22365","date":"2026-10-27","epss":0.00459,"percentile":0.39589}],"urls":["http://www.openwall.com/lists/oss-security/2024/01/18/3","https://github.com/linux-pam/linux-pam","https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb","https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0","https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22365","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY."}]},{"artifact":{"id":"27e0bbb671d38fed","cpes":["cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam-modules-bin:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules_bin:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules_bin:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam-modules:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam-modules:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam-modules-bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam_modules_bin:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*"],"name":"libpam-modules-bin","purl":"pkg:deb/ubuntu/libpam-modules-bin@1.4.0-11ubuntu2.3?arch=amd64&distro=ubuntu-22.04&upstream=pam","type":"deb","version":"1.4.0-11ubuntu2.3","language":"","licenses":["sha256:7c584b7b1f37b612da7fdf3b076eb2b2c1bae72865f0699d745ae2ac7d40d13e"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpam-modules-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libpam-modules-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-modules-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-modules-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-modules-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-modules-bin.list"}],"upstreams":[{"name":"pam"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.4.0-11ubuntu2.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-22365","versionConstraint":"< 1.4.0-11ubuntu2.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pam","version":"1.4.0-11ubuntu2.3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-22365","fix":{"state":"fixed","versions":["1.4.0-11ubuntu2.4"],"available":[{"date":"2024-01-17","kind":"advisory","version":"1.4.0-11ubuntu2.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-22365","cwe":"CWE-664","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22365","date":"2026-10-27","epss":0.00459,"percentile":0.39589}],"risk":0.2295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-22365"},"relatedVulnerabilities":[{"id":"CVE-2024-22365","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22365","cwe":"CWE-664","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22365","date":"2026-10-27","epss":0.00459,"percentile":0.39589}],"urls":["http://www.openwall.com/lists/oss-security/2024/01/18/3","https://github.com/linux-pam/linux-pam","https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb","https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0","https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22365","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY."}]},{"artifact":{"id":"796e87c8700d1668","cpes":["cpe:2.3:a:libpam-runtime:libpam-runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam-runtime:libpam_runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_runtime:libpam-runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam_runtime:libpam_runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam-runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam_runtime:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*"],"name":"libpam-runtime","purl":"pkg:deb/ubuntu/libpam-runtime@1.4.0-11ubuntu2.3?arch=all&distro=ubuntu-22.04&upstream=pam","type":"deb","version":"1.4.0-11ubuntu2.3","language":"","licenses":["sha256:7c584b7b1f37b612da7fdf3b076eb2b2c1bae72865f0699d745ae2ac7d40d13e"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpam-runtime/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libpam-runtime/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-runtime.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-runtime.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-runtime.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.list"},{"path":"/var/lib/dpkg/info/libpam-runtime.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.postinst"},{"path":"/var/lib/dpkg/info/libpam-runtime.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.postrm"},{"path":"/var/lib/dpkg/info/libpam-runtime.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.prerm"},{"path":"/var/lib/dpkg/info/libpam-runtime.templates","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam-runtime.templates"}],"upstreams":[{"name":"pam"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.4.0-11ubuntu2.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-22365","versionConstraint":"< 1.4.0-11ubuntu2.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pam","version":"1.4.0-11ubuntu2.3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-22365","fix":{"state":"fixed","versions":["1.4.0-11ubuntu2.4"],"available":[{"date":"2024-01-17","kind":"advisory","version":"1.4.0-11ubuntu2.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-22365","cwe":"CWE-664","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22365","date":"2026-10-27","epss":0.00459,"percentile":0.39589}],"risk":0.2295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-22365"},"relatedVulnerabilities":[{"id":"CVE-2024-22365","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22365","cwe":"CWE-664","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22365","date":"2026-10-27","epss":0.00459,"percentile":0.39589}],"urls":["http://www.openwall.com/lists/oss-security/2024/01/18/3","https://github.com/linux-pam/linux-pam","https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb","https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0","https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22365","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY."}]},{"artifact":{"id":"6472f47572510566","cpes":["cpe:2.3:a:libpam0g:libpam0g:1.4.0-11ubuntu2.3:*:*:*:*:*:*:*"],"name":"libpam0g","purl":"pkg:deb/ubuntu/libpam0g@1.4.0-11ubuntu2.3?arch=amd64&distro=ubuntu-22.04&upstream=pam","type":"deb","version":"1.4.0-11ubuntu2.3","language":"","licenses":["sha256:7c584b7b1f37b612da7fdf3b076eb2b2c1bae72865f0699d745ae2ac7d40d13e"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpam0g/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libpam0g/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam0g:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpam0g:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"pam"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.4.0-11ubuntu2.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-22365","versionConstraint":"< 1.4.0-11ubuntu2.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pam","version":"1.4.0-11ubuntu2.3"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-22365","fix":{"state":"fixed","versions":["1.4.0-11ubuntu2.4"],"available":[{"date":"2024-01-17","kind":"advisory","version":"1.4.0-11ubuntu2.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-22365","cwe":"CWE-664","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22365","date":"2026-10-27","epss":0.00459,"percentile":0.39589}],"risk":0.2295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-22365"},"relatedVulnerabilities":[{"id":"CVE-2024-22365","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22365","cwe":"CWE-664","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22365","date":"2026-10-27","epss":0.00459,"percentile":0.39589}],"urls":["http://www.openwall.com/lists/oss-security/2024/01/18/3","https://github.com/linux-pam/linux-pam","https://github.com/linux-pam/linux-pam/commit/031bb5a5d0d950253b68138b498dc93be69a64cb","https://github.com/linux-pam/linux-pam/releases/tag/v1.6.0","https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22365","description":"linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY."}]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42497","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-42497","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-42497","cwe":"CWE-59","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-42497","cwe":"CWE-732","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-42497","date":"2026-10-27","epss":0.00458,"percentile":0.39531}],"risk":0.22899999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42497"},"relatedVulnerabilities":[{"id":"CVE-2026-42497","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42497","cwe":"CWE-59","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-42497","cwe":"CWE-732","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-42497","date":"2026-10-27","epss":0.00458,"percentile":0.39531}],"urls":["https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch","https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes","https://www.cve.org/CVERecord?id=CVE-2026-42496"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42497","description":"Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to link() without validating it against absolute paths or .. segments, creating a hardlink that shares the victim file's inode.\n\nA subsequent write through the extracted name modifies the victim file, and the post-extraction chmod, chown, and utime block in _extract_file() (guarded only against symlinks via -l) applies the tar header's mode, owner, and timestamps to the shared inode during extraction alone."}]},{"artifact":{"id":"3a4f17bf127dff8c","cpes":["cpe:2.3:a:bootstrap:bootstrap:3.4.1:*:*:*:*:*:*:*"],"name":"bootstrap","purl":"pkg:npm/bootstrap@3.4.1","type":"npm","version":"3.4.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/share/jupyterhub/static/components/bootstrap/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/share/jupyterhub/static/components/bootstrap/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q58r-hwc8-rm9j","versionConstraint":"=3.4.1 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"bootstrap","version":"3.4.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-q58r-hwc8-rm9j","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1647","cwe":"CWE-79","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2025-1647","date":"2026-10-27","epss":0.00432,"percentile":0.37337}],"risk":0.22896000000000002,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-1647","https://www.herodevs.com/vulnerability-directory/cve-2025-1647","https://lists.debian.org/debian-lts-announce/2025/06/msg00001.html","https://lists.debian.org/debian-lts-announce/2026/10/msg00023.html"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q58r-hwc8-rm9j","description":"Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components"},"relatedVulnerabilities":[{"id":"CVE-2025-1647","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1647","cwe":"CWE-79","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2025-1647","date":"2026-10-27","epss":0.00432,"percentile":0.37337}],"urls":["https://www.herodevs.com/vulnerability-directory/cve-2025-1647","https://lists.debian.org/debian-lts-announce/2025/06/msg00001.html","https://lists.debian.org/debian-lts-announce/2026/10/msg00023.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1647","description":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0."}]},{"artifact":{"id":"fd33bcffbac145b9","cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:generic/krb5@1.21.2","type":"binary","version":"1.21.2","language":"","licenses":[],"locations":[{"path":"/opt/conda/lib/libkrb5.so.3.3","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libkrb5.so.3.3","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-26462","versionConstraint":"= 1.21.2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:mit:kerberos_5:1.21.2:*:*:*:*:*:*:*"],"package":{"name":"krb5","version":"1.21.2"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-26462","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26462","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-26462","cwe":"CWE-401","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26462","date":"2026-10-27","epss":0.00433,"percentile":0.37425}],"risk":0.227325,"urls":["https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_3.md","https://security.netapp.com/advisory/ntap-20240415-0012/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26462","description":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c."},"relatedVulnerabilities":[]},{"artifact":{"id":"e619a3bd38c3d092","cpes":["cpe:2.3:a:kjd:internationalized_domain_names_in_applications:3.4:*:*:*:*:python:*:*"],"name":"idna","purl":"pkg:pypi/idna@3.4","type":"python","version":"3.4","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/idna-3.4.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/idna-3.4.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/idna-3.4.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/idna-3.4.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/idna-3.4.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/idna-3.4.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.15"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-65pc-fj4g-8rjx","versionConstraint":"<3.15 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"idna","version":"3.4"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-65pc-fj4g-8rjx","fix":{"state":"fixed","versions":["3.15"],"available":[{"date":"2026-05-19","kind":"first-observed","version":"3.15"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45409","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-45409","date":"2026-10-27","epss":0.00408,"percentile":0.34896}],"risk":0.22643999999999997,"urls":["https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx","https://nvd.nist.gov/vuln/detail/CVE-2026-45409","https://github.com/pypa/advisory-database/tree/main/vulns/idna/PYSEC-2026-215.yaml"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-65pc-fj4g-8rjx","description":"Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix"},"relatedVulnerabilities":[{"id":"CVE-2026-45409","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45409","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-45409","date":"2026-10-27","epss":0.00408,"percentile":0.34896}],"urls":["https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45409","description":"Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `\"\\u0660\" * N` or `\"\\u30fb\" * N + \"\\u6f22\"` utilize the `valid_contexto` function prior to length rejection, and for high values of `N` will take a long time to process. This is the same issue as CVE-2024-3651, however the original remediation in 2024 was not a complete fix. A specially crafted argument to the `idna.encode()` function could consume significant resources. This may lead to a denial-of-service. Starting in version 3.14, the function rejects long inputs as soon as practicable prior to any further processing to minimize resource consumption. In version 3.15, this approach was extended to lesser used alternate functions (i.e. per-label conversions and codec support). A workaround is available. Domain names cannot exceed 253 characters in length. If this length limit is enforced prior to passing the domain to the `idna.encode()` function, it should no longer consume significant resources. This is triggered by arbitrarily large inputs that would not occur in normal usage, but may be passed to the library assuming there is no preliminary input validation by the higher-level application."}]},{"artifact":{"id":"b96ada19cdd5e352","cpes":["cpe:2.3:a:jupyter_development_team_project:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_project:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_teamproject:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_teamproject:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team_project:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_teamproject:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_development_team:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterhub:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterhub:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterhub:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterhub:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_project:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_project:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterproject:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterproject:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterhub:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterhub:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jupyterhub:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jupyterhub:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter_project:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterproject:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyterhub:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:jupyter:jupyterhub:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:python:jupyterhub:4.0.2:*:*:*:*:*:*:*"],"name":"jupyterhub","purl":"pkg:pypi/jupyterhub@4.0.2","type":"python","version":"4.0.2","language":"python","licenses":["BSD"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/jupyterhub-4.0.2.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"5.5.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-p43p-whwx-q52h","versionConstraint":"<5.5.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jupyterhub","version":"4.0.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-p43p-whwx-q52h","fix":{"state":"fixed","versions":["5.5.0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"5.5.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54338","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54338","date":"2026-10-27","epss":0.00437,"percentile":0.37771}],"risk":0.225055,"urls":["https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-p43p-whwx-q52h","https://nvd.nist.gov/vuln/detail/CVE-2026-54338","https://github.com/jupyterhub/jupyterhub/commit/d6dc595f84b7509969686da31d87d6d69e7fce0a"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-p43p-whwx-q52h","description":"JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login"},"relatedVulnerabilities":[{"id":"CVE-2026-54338","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54338","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54338","date":"2026-10-27","epss":0.00437,"percentile":0.37771}],"urls":["https://github.com/jupyterhub/jupyterhub/commit/d6dc595f84b7509969686da31d87d6d69e7fce0a","https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-p43p-whwx-q52h"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54338","description":"JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and storage resources. This issue is fixed in version 5.5.0."}]},{"artifact":{"id":"014c7abafa1a885f","cpes":["cpe:2.3:a:python:setuptools:68.2.2:*:*:*:*:*:*:*"],"name":"setuptools","purl":"pkg:pypi/setuptools@68.2.2","type":"python","version":"68.2.2","language":"python","licenses":[],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/setuptools-68.2.2-py3.11.egg-info/PKG-INFO","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/setuptools-68.2.2-py3.11.egg-info/PKG-INFO","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/setuptools-68.2.2-py3.11.egg-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/setuptools-68.2.2-py3.11.egg-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"83.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h35f-9h28-mq5c","versionConstraint":"<83.0.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"setuptools","version":"68.2.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-h35f-9h28-mq5c","fix":{"state":"fixed","versions":["83.0.0"],"available":[{"date":"2026-07-22","kind":"first-observed","version":"83.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59890","cwe":"CWE-176","type":"Primary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59890","cwe":"CWE-697","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59890","date":"2026-10-27","epss":0.00405,"percentile":0.34606}],"risk":0.22477499999999997,"urls":["https://github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c","https://nvd.nist.gov/vuln/detail/CVE-2026-59890","https://github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f","https://github.com/pypa/advisory-database/tree/main/vulns/setuptools/PYSEC-2026-3447.yaml","https://github.com/pypa/setuptools/releases/tag/v83.0.0"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h35f-9h28-mq5c","description":"setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+"},"relatedVulnerabilities":[{"id":"CVE-2026-59890","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59890","cwe":"CWE-176","type":"Primary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59890","cwe":"CWE-697","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59890","date":"2026-10-27","epss":0.00405,"percentile":0.34606}],"urls":["https://github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f","https://github.com/pypa/setuptools/releases/tag/v83.0.0","https://github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59890","description":"setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unicode normalization, so on macOS APFS or HFS+ an NFD file name could bypass an NFC exclusion rule and be packed into a source distribution. This issue is fixed in version 83.0.0."}]},{"artifact":{"id":"9487810cf2b0ac44","cpes":["cpe:2.3:a:gcc-12-base:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc-12-base:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc_12_base:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc_12_base:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc-12:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc-12:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc_12:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc_12:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc-12-base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc_12_base:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*"],"name":"gcc-12-base","purl":"pkg:deb/ubuntu/gcc-12-base@12.3.0-1ubuntu1~22.04?arch=amd64&distro=ubuntu-22.04&upstream=gcc-12","type":"deb","version":"12.3.0-1ubuntu1~22.04","language":"","licenses":["sha256:da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-12-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/gcc-12-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gcc-12-base:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/gcc-12-base:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-12"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gcc-12","version":"12.3.0-1ubuntu1~22.04"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-10-27","epss":0.00444,"percentile":0.38429}],"risk":0.22200000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-95619"},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-10-27","epss":0.00444,"percentile":0.38429}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"0167188753744b50","cpes":["cpe:2.3:a:libgcc-s1:libgcc-s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-s1:libgcc_s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_s1:libgcc-s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_s1:libgcc_s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc-s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc_s1:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*"],"name":"libgcc-s1","purl":"pkg:deb/ubuntu/libgcc-s1@12.3.0-1ubuntu1~22.04?arch=amd64&distro=ubuntu-22.04&upstream=gcc-12","type":"deb","version":"12.3.0-1ubuntu1~22.04","language":"","licenses":["sha256:da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-12-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgcc-s1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgcc-s1:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgcc-s1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-12"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gcc-12","version":"12.3.0-1ubuntu1~22.04"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-10-27","epss":0.00444,"percentile":0.38429}],"risk":0.22200000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-95619"},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-10-27","epss":0.00444,"percentile":0.38429}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"0f7f38aaf7f6551a","cpes":["cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:12.3.0-1ubuntu1\\~22.04:*:*:*:*:*:*:*"],"name":"libstdc++6","purl":"pkg:deb/ubuntu/libstdc%2B%2B6@12.3.0-1ubuntu1~22.04?arch=amd64&distro=ubuntu-22.04&upstream=gcc-12","type":"deb","version":"12.3.0-1ubuntu1~22.04","language":"","licenses":["sha256:da8191658b3452ce9caf31638ba61dab31a38c619fa39df119812e050f592fd3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-12-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libstdc++6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libstdc++6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libstdc++6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-12"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gcc-12","version":"12.3.0-1ubuntu1~22.04"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-10-27","epss":0.00444,"percentile":0.38429}],"risk":0.22200000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-95619"},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-10-27","epss":0.00444,"percentile":0.38429}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"34ea66bcdaab73e8","cpes":["cpe:2.3:a:jose_padilla_project:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla_project:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla_project:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*"],"name":"pyjwt","purl":"pkg:pypi/pyjwt@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.14.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2gx3-rcp4-g85q","versionConstraint":"<=2.13.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"pyjwt","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-2gx3-rcp4-g85q","fix":{"state":"fixed","versions":["2.14.0"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.14.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-101917","cwe":"CWE-770","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-101917","date":"2026-10-27","epss":0.00428,"percentile":0.3683}],"risk":0.22042,"urls":["https://github.com/jpadilla/pyjwt/security/advisories/GHSA-2gx3-rcp4-g85q","https://nvd.nist.gov/vuln/detail/CVE-2026-101917","https://github.com/jpadilla/pyjwt/commit/ba4853a75fb9676362da17f67d0f64bd18afd4e1","https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2gx3-rcp4-g85q","description":"PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)"},"relatedVulnerabilities":[{"id":"CVE-2026-101917","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-101917","cwe":"CWE-770","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-101917","date":"2026-10-27","epss":0.00428,"percentile":0.3683}],"urls":["https://github.com/jpadilla/pyjwt/commit/ba4853a75fb9676362da17f67d0f64bd18afd4e1","https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-2gx3-rcp4-g85q"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-101917","description":"PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT get_signing_key_from_jwt is affected because unknown kid misses force refreshes without a negative cache or minimum refresh interval. This occurs when unauthenticated tokens repeatedly use the same unknown kid or varying kid values absent from the cached JWKS. As a result, each cache miss causes PyJWKClient to refresh the JWKS. Consequently, attacker traffic can amplify outbound requests to the configured JWKS endpoint. This issue is fixed in version 2.14.0."}]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-48962","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-48962","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-48962","cwe":"CWE-95","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-48962","cwe":"CWE-94","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-48962","date":"2026-10-27","epss":0.00439,"percentile":0.37999}],"risk":0.2195,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-48962"},"relatedVulnerabilities":[{"id":"CVE-2026-48962","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48962","cwe":"CWE-95","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-48962","cwe":"CWE-94","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-48962","date":"2026-10-27","epss":0.00439,"percentile":0.37999}],"urls":["https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610.patch","https://metacpan.org/release/PMQS/IO-Compress-2.220/changes","http://www.openwall.com/lists/oss-security/2026/05/27/4","https://access.redhat.com/errata/RHSA-2026:29182","https://access.redhat.com/errata/RHSA-2026:29210","https://access.redhat.com/errata/RHSA-2026:29867","https://access.redhat.com/errata/RHSA-2026:29941","https://access.redhat.com/errata/RHSA-2026:30085","https://access.redhat.com/errata/RHSA-2026:30086","https://access.redhat.com/errata/RHSA-2026:30115","https://access.redhat.com/errata/RHSA-2026:30843","https://access.redhat.com/errata/RHSA-2026:30851","https://access.redhat.com/errata/RHSA-2026:30858","https://access.redhat.com/errata/RHSA-2026:30859","https://access.redhat.com/errata/RHSA-2026:30860","https://access.redhat.com/errata/RHSA-2026:50262","https://access.redhat.com/security/cve/CVE-2026-48962","https://bugzilla.redhat.com/show_bug.cgi?id=2481767","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48962.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48962","description":"IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.\n\n_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.\n\nArbitrary Perl in the output glob executes at the calling process's privilege."}]},{"artifact":{"id":"d9ec059936cb29e9","cpes":["cpe:2.3:a:tukaani:xz:5.2.6:*:*:*:*:*:*:*"],"name":"xz","purl":"pkg:generic/xz@5.2.6","type":"binary","version":"5.2.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/xz","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/xz","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"5.8.3"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:tukaani:xz:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-34743","versionConstraint":"< 5.8.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:tukaani:xz:5.2.6:*:*:*:*:*:*:*"],"package":{"name":"xz","version":"5.2.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-34743","fix":{"state":"fixed","versions":["5.8.3"],"available":[{"date":"2026-04-08","kind":"first-observed","version":"5.8.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34743","cwe":"CWE-122","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-34743","date":"2026-10-27","epss":0.00514,"percentile":0.43625}],"risk":0.21844999999999998,"urls":["https://github.com/tukaani-project/xz/commit/c8c22869e780ff57c96b46939c3d79ff99395f87","https://github.com/tukaani-project/xz/releases/tag/v5.8.3","https://github.com/tukaani-project/xz/security/advisories/GHSA-x872-m794-cxhv","http://www.openwall.com/lists/oss-security/2026/03/31/13","https://lists.debian.org/debian-lts-announce/2026/07/msg00034.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34743","description":"XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3."},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-8291","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.10||>= 3.14.0, < 3.14.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-8291","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.10||>= 3.14.0, < 3.14.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-8291","fix":{"state":"fixed","versions":["3.9.24","3.10.19","3.11.14","3.12.12","3.13.10","3.14.1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.24"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.19"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.1"},{"date":"2025-10-10","kind":"first-observed","version":"3.9.24"},{"date":"2025-10-10","kind":"first-observed","version":"3.10.19"},{"date":"2025-10-10","kind":"first-observed","version":"3.11.14"},{"date":"2025-10-10","kind":"first-observed","version":"3.12.12"},{"date":"2025-12-04","kind":"first-observed","version":"3.13.10"},{"date":"2025-10-10","kind":"first-observed","version":"3.14.1"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-8291","cwe":"CWE-1285","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-8291","date":"2026-10-27","epss":0.00466,"percentile":0.40188}],"risk":0.21669,"urls":["https://github.com/python/cpython/commit/162997bb70e067668c039700141770687bc8f267","https://github.com/python/cpython/commit/1d29afb0d6218aa8fb5e1e4a6133a4778d89bb46","https://github.com/python/cpython/commit/333d4a6f4967d3ace91492a39ededbcf3faa76a6","https://github.com/python/cpython/commit/76437ac248ad8ca44e9bf697b02b1e2241df2196","https://github.com/python/cpython/commit/8392b2f0d35678407d9ce7d95655a5b77de161b4","https://github.com/python/cpython/commit/bca11ae7d575d87ed93f5dd6a313be6246e3e388","https://github.com/python/cpython/commit/d11e69d6203080e3ec450446bfed0516727b85c3","https://github.com/python/cpython/issues/139700","https://github.com/python/cpython/pull/139702","https://mail.python.org/archives/list/security-announce@python.org/thread/QECOPWMTH4VPPJAXAH2BGTA4XADOP62G/","https://github.com/google/security-research/security/advisories/GHSA-hhv7-p4pg-wm6p","https://github.com/psf/advisory-database/blob/main/advisories/python/PSF-2025-12.json"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-8291","description":"The 'zipfile' module would not check the validity of the ZIP64 End of\nCentral Directory (EOCD) Locator record offset value would not be used to\nlocate the ZIP64 EOCD record, instead the ZIP64 EOCD record would be\nassumed to be the previous record in the ZIP archive. This could be abused\nto create ZIP archives that are handled differently by the 'zipfile' module\ncompared to other ZIP implementations.\n\n\nRemediation maintains this behavior, but checks that the offset specified\nin the ZIP64 EOCD Locator record matches the expected value."},"relatedVulnerabilities":[]},{"artifact":{"id":"4192b772fea9db3e","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.21"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q2hr-2g5m-vwhr","versionConstraint":"<1.1.21 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-q2hr-2g5m-vwhr","fix":{"state":"fixed","versions":["1.1.21"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"1.1.21"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102277","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102277","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102277","date":"2026-10-27","epss":0.0042,"percentile":0.36086}],"risk":0.2163,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr","https://nvd.nist.gov/vuln/detail/CVE-2026-102277","https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96","https://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22","https://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364","https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q2hr-2g5m-vwhr","description":"brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service"},"relatedVulnerabilities":[{"id":"CVE-2026-102277","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102277","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102277","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102277","date":"2026-10-27","epss":0.0042,"percentile":0.36086}],"urls":["https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96","https://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22","https://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364","https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102277","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {a},b}-shaped patterns with many trailing closing braces by restarting its scan once for each trailing closing brace. The successive full-input rescans with linear working-string growth cause quadratic CPU time and memory pressure that can block the Node.js event loop. The process eventually recovers, making the impact a recoverable CPU denial of service. This issue is fixed in versions 1.1.21, 2.1.7, 3.0.9, and 5.0.12."}]},{"artifact":{"id":"77066e7e6d2a4d57","cpes":["cpe:2.3:a:juliangruber:brace-expansion:1.1.11:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@1.1.11","type":"npm","version":"1.1.11","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/rimraf/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.21"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q2hr-2g5m-vwhr","versionConstraint":"<1.1.21 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"1.1.11"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-q2hr-2g5m-vwhr","fix":{"state":"fixed","versions":["1.1.21"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"1.1.21"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102277","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102277","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102277","date":"2026-10-27","epss":0.0042,"percentile":0.36086}],"risk":0.2163,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr","https://nvd.nist.gov/vuln/detail/CVE-2026-102277","https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96","https://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22","https://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364","https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q2hr-2g5m-vwhr","description":"brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service"},"relatedVulnerabilities":[{"id":"CVE-2026-102277","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102277","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102277","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102277","date":"2026-10-27","epss":0.0042,"percentile":0.36086}],"urls":["https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96","https://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22","https://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364","https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102277","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {a},b}-shaped patterns with many trailing closing braces by restarting its scan once for each trailing closing brace. The successive full-input rescans with linear working-string growth cause quadratic CPU time and memory pressure that can block the Node.js event loop. The process eventually recovers, making the impact a recoverable CPU denial of service. This issue is fixed in versions 1.1.21, 2.1.7, 3.0.9, and 5.0.12."}]},{"artifact":{"id":"b08ada23090bcd4d","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/node-gyp/node_modules/cacache/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.1.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q2hr-2g5m-vwhr","versionConstraint":">=2.0.0,<2.1.7 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-q2hr-2g5m-vwhr","fix":{"state":"fixed","versions":["2.1.7"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.1.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102277","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102277","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102277","date":"2026-10-27","epss":0.0042,"percentile":0.36086}],"risk":0.2163,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr","https://nvd.nist.gov/vuln/detail/CVE-2026-102277","https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96","https://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22","https://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364","https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q2hr-2g5m-vwhr","description":"brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service"},"relatedVulnerabilities":[{"id":"CVE-2026-102277","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102277","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102277","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102277","date":"2026-10-27","epss":0.0042,"percentile":0.36086}],"urls":["https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96","https://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22","https://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364","https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102277","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {a},b}-shaped patterns with many trailing closing braces by restarting its scan once for each trailing closing brace. The successive full-input rescans with linear working-string growth cause quadratic CPU time and memory pressure that can block the Node.js event loop. The process eventually recovers, making the impact a recoverable CPU denial of service. This issue is fixed in versions 1.1.21, 2.1.7, 3.0.9, and 5.0.12."}]},{"artifact":{"id":"fa77c1473ae8947b","cpes":["cpe:2.3:a:juliangruber:brace-expansion:2.0.1:*:*:*:*:node.js:*:*"],"name":"brace-expansion","purl":"pkg:npm/brace-expansion@2.0.1","type":"npm","version":"2.0.1","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/brace-expansion/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.1.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q2hr-2g5m-vwhr","versionConstraint":">=2.0.0,<2.1.7 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"brace-expansion","version":"2.0.1"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-q2hr-2g5m-vwhr","fix":{"state":"fixed","versions":["2.1.7"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.1.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102277","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102277","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102277","date":"2026-10-27","epss":0.0042,"percentile":0.36086}],"risk":0.2163,"urls":["https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr","https://nvd.nist.gov/vuln/detail/CVE-2026-102277","https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96","https://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22","https://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364","https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q2hr-2g5m-vwhr","description":"brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service"},"relatedVulnerabilities":[{"id":"CVE-2026-102277","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102277","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-102277","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102277","date":"2026-10-27","epss":0.0042,"percentile":0.36086}],"urls":["https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96","https://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22","https://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364","https://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e","https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102277","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {a},b}-shaped patterns with many trailing closing braces by restarting its scan once for each trailing closing brace. The successive full-input rescans with linear working-string growth cause quadratic CPU time and memory pressure that can block the Node.js event loop. The process eventually recovers, making the impact a recoverable CPU denial of service. This issue is fixed in versions 1.1.21, 2.1.7, 3.0.9, and 5.0.12."}]},{"artifact":{"id":"4bd0adec6e7440e1","cpes":["cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:node.js:*:*","cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:rust:*:*","cpe:2.3:a:isaacs:tar:6.1.15:*:*:*:*:node.js:*:*"],"name":"tar","purl":"pkg:npm/tar@6.1.15","type":"npm","version":"6.1.15","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-r6q2-hw4h-h46w","versionConstraint":"<=7.5.3 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"tar","version":"6.1.15"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-r6q2-hw4h-h46w","fix":{"state":"fixed","versions":["7.5.4"],"available":[{"date":"2026-01-22","kind":"first-observed","version":"7.5.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L","metrics":{"baseScore":8.8,"impactScore":5.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-23950","cwe":"CWE-176","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-23950","cwe":"CWE-352","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-23950","cwe":"CWE-367","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-23950","cwe":"CWE-367","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2026-23950","cwe":"CWE-367","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-23950","date":"2026-10-27","epss":0.00264,"percentile":0.1821}],"risk":0.21516000000000002,"urls":["https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w","https://nvd.nist.gov/vuln/detail/CVE-2026-23950","https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-r6q2-hw4h-h46w","description":"Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS"},"relatedVulnerabilities":[{"id":"CVE-2026-23950","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L","metrics":{"baseScore":8.8,"impactScore":5.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L","metrics":{"baseScore":8.8,"impactScore":5.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-23950","cwe":"CWE-176","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-23950","cwe":"CWE-352","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-23950","cwe":"CWE-367","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-23950","cwe":"CWE-367","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2026-23950","cwe":"CWE-367","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-23950","date":"2026-10-27","epss":0.00264,"percentile":0.1821}],"urls":["https://github.com/isaacs/node-tar/commit/3b1abfae650056edfabcbe0a0df5954d390521e6","https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w","https://access.redhat.com/errata/RHSA-2026:18480","https://access.redhat.com/errata/RHSA-2026:18868","https://access.redhat.com/errata/RHSA-2026:2144","https://access.redhat.com/errata/RHSA-2026:2926","https://access.redhat.com/errata/RHSA-2026:6192","https://access.redhat.com/security/cve/CVE-2026-23950","https://bugzilla.redhat.com/show_bug.cgi?id=2431036","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23950.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-23950","description":"node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On case-insensitive or normalization-insensitive filesystems (such as macOS APFS, In which it has been tested), the library fails to lock colliding paths (e.g., `ß` and `ss`), allowing them to be processed in parallel. This bypasses the library's internal concurrency safeguards and permits Symlink Poisoning attacks via race conditions. The library uses a `PathReservations` system to ensure that metadata checks and file operations for the same path are serialized. This prevents race conditions where one entry might clobber another concurrently. This is a Race Condition which enables Arbitrary File Overwrite. This vulnerability affects users and systems using node-tar on macOS (APFS/HFS+). Because of using `NFD` Unicode normalization (in which `ß` and `ss` are different), conflicting paths do not have their order properly preserved under filesystems that ignore Unicode normalization (e.g., APFS (in which `ß` causes an inode collision with `ss`)). This enables an attacker to circumvent internal parallelization locks (`PathReservations`) using conflicting filenames within a malicious tar archive. The patch in version 7.5.4 updates `path-reservations.js` to use a normalization form that matches the target filesystem's behavior (e.g., `NFKD`), followed by first `toLocaleLowerCase('en')` and then `toLocaleUpperCase('en')`. As a workaround, users who cannot upgrade promptly, and who are programmatically using `node-tar` to extract arbitrary tarball data should filter out all `SymbolicLink` entries (as npm does) to defend against arbitrary file writes via this file system entry name collision issue."}]},{"artifact":{"id":"68c22762fa045f2f","cpes":["cpe:2.3:a:tar:tar:1.34\\+dfsg-1ubuntu0.1.22.04.1:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:deb/ubuntu/tar@1.34%2Bdfsg-1ubuntu0.1.22.04.1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"1.34+dfsg-1ubuntu0.1.22.04.1","language":"","licenses":["sha256:5e07fa97dc98e502dc15d09d4c14647ec77509f949267a30d1341cadf84d629f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/tar/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/tar/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/tar.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/tar.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/tar.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/tar.list"},{"path":"/var/lib/dpkg/info/tar.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/tar.postinst"},{"path":"/var/lib/dpkg/info/tar.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/tar.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.34+dfsg-1ubuntu0.1.22.04.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-5704","versionConstraint":"< 1.34+dfsg-1ubuntu0.1.22.04.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"tar","version":"1.34+dfsg-1ubuntu0.1.22.04.1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-5704","fix":{"state":"fixed","versions":["1.34+dfsg-1ubuntu0.1.22.04.6"],"available":[{"date":"2026-07-22","kind":"advisory","version":"1.34+dfsg-1ubuntu0.1.22.04.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-5704","cwe":"CWE-434","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5704","date":"2026-10-27","epss":0.0043,"percentile":0.37026}],"risk":0.215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5704"},"relatedVulnerabilities":[{"id":"CVE-2026-5704","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5704","cwe":"CWE-434","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5704","date":"2026-10-27","epss":0.0043,"percentile":0.37026}],"urls":["https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:66514","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-5704","https://bugzilla.redhat.com/show_bug.cgi?id=2455360","http://www.openwall.com/lists/oss-security/2026/04/11/10","http://www.openwall.com/lists/oss-security/2026/04/11/11","http://www.openwall.com/lists/oss-security/2026/04/12/2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5704","description":"A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection."}]},{"artifact":{"id":"34ea66bcdaab73e8","cpes":["cpe:2.3:a:jose_padilla_project:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla_project:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla_project:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*"],"name":"pyjwt","purl":"pkg:pypi/pyjwt@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.14.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-ffc3-869f-jxw9","versionConstraint":"<=2.13.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"pyjwt","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-ffc3-869f-jxw9","fix":{"state":"fixed","versions":["2.14.0"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.14.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102268","cwe":"CWE-347","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102268","date":"2026-10-27","epss":0.00236,"percentile":0.14495}],"risk":0.21358000000000002,"urls":["https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9","https://nvd.nist.gov/vuln/detail/CVE-2026-102268","https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07","https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"],"severity":"Critical","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-ffc3-869f-jxw9","description":"PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard"},"relatedVulnerabilities":[{"id":"CVE-2026-102268","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102268","cwe":"CWE-347","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102268","date":"2026-10-27","epss":0.00236,"percentile":0.14495}],"urls":["https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07","https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102268","description":"PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is_pem_format in jwt/utils.py is affected because is_pem_format does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and supplies a mutated public-key PEM as raw key bytes. As a result, HMACAlgorithm.prepare_key treats the unrecognized asymmetric public key as an HMAC secret. Consequently, an attacker who knows the public key can forge authenticated HMAC tokens. This issue is fixed in version 2.14.0."}]},{"artifact":{"id":"34ea66bcdaab73e8","cpes":["cpe:2.3:a:jose_padilla_project:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla_project:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla_project:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*"],"name":"pyjwt","purl":"pkg:pypi/pyjwt@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.15.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-42vr-xj54-vc7v","versionConstraint":">=2.0.0a1,<=2.14.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"pyjwt","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-42vr-xj54-vc7v","fix":{"state":"fixed","versions":["2.15.0"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.15.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-101918","cwe":"CWE-248","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-101918","date":"2026-10-27","epss":0.00413,"percentile":0.35394}],"risk":0.212695,"urls":["https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v","https://nvd.nist.gov/vuln/detail/CVE-2026-101918","https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b","https://github.com/jpadilla/pyjwt/releases/tag/2.15.0"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-42vr-xj54-vc7v","description":"PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)"},"relatedVulnerabilities":[{"id":"CVE-2026-101918","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-101918","cwe":"CWE-248","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-101918","date":"2026-10-27","epss":0.00413,"percentile":0.35394}],"urls":["https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b","https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-101918","description":"PyJWT is a Python implementation of JSON Web Token standards. From 2.0.0a1 until 2.15.0, PyJWT PyJWKClient.get_signing_key_from_jwt is affected because payload parser catches ValueError but not RecursionError. This occurs when an attacker-controlled recursively nested payload reaches json.loads. As a result, documented PyJWT exception handling does not contain the failure. Consequently, an unauthenticated request can raise an exception that may produce an HTTP 500 response. The advisory-defined affected implementation also includes jwt/api_jwt.py, verify_signature=False. This issue is fixed in version 2.15.0."}]},{"artifact":{"id":"28cfc0a0b958dc4d","cpes":["cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2-8-0:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2_8_0:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2_8_0:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2-8:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2-8:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2_8:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2_8:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2:libpcre2-8-0:10.39-3ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2:libpcre2_8_0:10.39-3ubuntu0.1:*:*:*:*:*:*:*"],"name":"libpcre2-8-0","purl":"pkg:deb/ubuntu/libpcre2-8-0@10.39-3ubuntu0.1?arch=amd64&distro=ubuntu-22.04&upstream=pcre2","type":"deb","version":"10.39-3ubuntu0.1","language":"","licenses":["sha256:f65dae37239e4d61a1bdeaf2ded76b8569d012a054aa042233b78615e7a83210"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpcre2-8-0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libpcre2-8-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpcre2-8-0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libpcre2-8-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"pcre2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86145","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pcre2","version":"10.39-3ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-86145","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-86145","cwe":"CWE-424","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-86145","date":"2026-10-27","epss":0.00425,"percentile":0.36545}],"risk":0.21250000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-86145"},"relatedVulnerabilities":[{"id":"CVE-2026-86145","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86145","cwe":"CWE-424","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-86145","date":"2026-10-27","epss":0.00425,"percentile":0.36545}],"urls":["https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48","https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf","http://www.openwall.com/lists/oss-security/2026/09/05/3"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86145","description":"PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API)."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-9076","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-9076","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-9076","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-9076","date":"2026-10-27","epss":0.00707,"percentile":0.53221}],"risk":0.2121,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-9076"},"relatedVulnerabilities":[{"id":"CVE-2026-9076","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9076","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-9076","date":"2026-10-27","epss":0.00707,"percentile":0.53221}],"urls":["https://github.com/openssl/openssl/commit/05b066366842f930fadd9a6e94df98030af431bb","https://github.com/openssl/openssl/commit/3d8d5bc1056b2f62da9fede23fedbf47e85187b0","https://github.com/openssl/openssl/commit/715349a1d7c6db970e6815dafb90915f07307f98","https://github.com/openssl/openssl/commit/77bf00ab13f6ff5e516535432f0328ed70ec0c26","https://github.com/openssl/openssl/commit/eecbe330977e8d023aae1ca2d9bdbe983ef3fdc6","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9076","description":"Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker's PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.25"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-9076","versionConstraint":"< 3.0.2-0ubuntu1.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-9076","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.25"],"available":[{"date":"2026-06-09","kind":"advisory","version":"3.0.2-0ubuntu1.25"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-9076","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-9076","date":"2026-10-27","epss":0.00707,"percentile":0.53221}],"risk":0.2121,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-9076"},"relatedVulnerabilities":[{"id":"CVE-2026-9076","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9076","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-9076","date":"2026-10-27","epss":0.00707,"percentile":0.53221}],"urls":["https://github.com/openssl/openssl/commit/05b066366842f930fadd9a6e94df98030af431bb","https://github.com/openssl/openssl/commit/3d8d5bc1056b2f62da9fede23fedbf47e85187b0","https://github.com/openssl/openssl/commit/715349a1d7c6db970e6815dafb90915f07307f98","https://github.com/openssl/openssl/commit/77bf00ab13f6ff5e516535432f0328ed70ec0c26","https://github.com/openssl/openssl/commit/eecbe330977e8d023aae1ca2d9bdbe983ef3fdc6","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9076","description":"Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker's PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue."}]},{"artifact":{"id":"1dfda117862376da","cpes":["cpe:2.3:a:postcss-selector-parser:postcss-selector-parser:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:postcss-selector-parser:postcss_selector_parser:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:postcss_selector_parser:postcss-selector-parser:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:postcss_selector_parser:postcss_selector_parser:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:postcss-selector:postcss-selector-parser:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:postcss-selector:postcss_selector_parser:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:postcss_selector:postcss-selector-parser:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:postcss_selector:postcss_selector_parser:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:postcss:postcss-selector-parser:6.0.13:*:*:*:*:*:*:*","cpe:2.3:a:postcss:postcss_selector_parser:6.0.13:*:*:*:*:*:*:*"],"name":"postcss-selector-parser","purl":"pkg:npm/postcss-selector-parser@6.0.13","type":"npm","version":"6.0.13","language":"javascript","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"6.1.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rj75-hqrm-r3gf","versionConstraint":"<6.1.5 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"postcss-selector-parser","version":"6.0.13"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-rj75-hqrm-r3gf","fix":{"state":"fixed","versions":["6.1.5"],"available":[{"date":"2026-10-26","kind":"first-observed","version":"6.1.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-104844","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-104844","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-104844","date":"2026-10-27","epss":0.00389,"percentile":0.328}],"risk":0.212005,"urls":["https://github.com/postcss/postcss-selector-parser/security/advisories/GHSA-rj75-hqrm-r3gf","https://nvd.nist.gov/vuln/detail/CVE-2026-104844","https://github.com/postcss/postcss-selector-parser/commit/62b191792df0a0bc56062e5a875bc74aae2a51cd","https://github.com/postcss/postcss-selector-parser/releases/tag/7.1.6","https://github.com/postcss/postcss-selector-parser/pull/346","https://github.com/postcss/postcss-selector-parser/commit/70b0779c843462197380d25daa02d1528bf7eae5","https://github.com/postcss/postcss-selector-parser/releases/tag/6.1.5"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rj75-hqrm-r3gf","description":"PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-104844","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-104844","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-104844","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-104844","date":"2026-10-27","epss":0.00389,"percentile":0.328}],"urls":["https://github.com/postcss/postcss-selector-parser/commit/62b191792df0a0bc56062e5a875bc74aae2a51cd","https://github.com/postcss/postcss-selector-parser/releases/tag/7.1.6","https://github.com/postcss/postcss-selector-parser/security/advisories/GHSA-rj75-hqrm-r3gf"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-104844","description":"PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. Prior to 7.1.6, src/parser.js splitWord() can receive a flat selector as one word token carrying many class or ID indexes because period and hash characters are not tokenizer word delimiters. The uniqs() deduplication and per-index class and ID membership checks repeatedly scan the class and ID index arrays, while a separate Sass-interpolation filtering pass also performs repeated linear scanning. Together, these passes make parsing quadratic in the number of indexes and allow a crafted selector to occupy a synchronous parser thread. The maxNestingDepth guard does not mitigate the issue because the hostile selector can have zero nesting depth. Only consumers that synchronously parse untrusted selectors in an exposed request path are affected; ordinary build-time parsing of trusted sources is not affected. This issue is fixed in version 7.1.6."}]},{"artifact":{"id":"9bfa8bd71796afc6","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-10-27","epss":0.00424,"percentile":0.36521}],"risk":0.212,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107778"},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-10-27","epss":0.00424,"percentile":0.36521}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"7570e146ba37f512","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-10-27","epss":0.00424,"percentile":0.36521}],"risk":0.212,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107778"},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-10-27","epss":0.00424,"percentile":0.36521}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"513c46e2da3930be","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-10-27","epss":0.00424,"percentile":0.36521}],"risk":0.212,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107778"},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-10-27","epss":0.00424,"percentile":0.36521}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"09c4acfd49c598b7","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.19.2-2ubuntu0.2:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.19.2-2ubuntu0.2?arch=amd64&distro=ubuntu-22.04&upstream=krb5","type":"deb","version":"1.19.2-2ubuntu0.2","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"krb5","version":"1.19.2-2ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-10-27","epss":0.00424,"percentile":0.36521}],"risk":0.212,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107778"},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-10-27","epss":0.00424,"percentile":0.36521}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42013","versionConstraint":"< 3.7.3-4ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-42013","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.9"],"available":[{"date":"2026-05-20","kind":"advisory","version":"3.7.3-4ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-42013","cwe":"CWE-295","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42013","date":"2026-10-27","epss":0.00423,"percentile":0.36381}],"risk":0.21150000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42013"},"relatedVulnerabilities":[{"id":"CVE-2026-42013","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42013","cwe":"CWE-295","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42013","date":"2026-10-27","epss":0.00423,"percentile":0.36381}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-42013","https://bugzilla.redhat.com/show_bug.cgi?id=2467448","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42013","description":"A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or man-in-the-middle attacks."}]},{"artifact":{"id":"4bd0adec6e7440e1","cpes":["cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:node.js:*:*","cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:rust:*:*","cpe:2.3:a:isaacs:tar:6.1.15:*:*:*:*:node.js:*:*"],"name":"tar","purl":"pkg:npm/tar@6.1.15","type":"npm","version":"6.1.15","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9ppj-qmqm-q256","versionConstraint":"<=7.5.10 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"tar","version":"6.1.15"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-9ppj-qmqm-q256","fix":{"state":"fixed","versions":["7.5.11"],"available":[{"date":"2026-03-11","kind":"first-observed","version":"7.5.11"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-31802","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-31802","date":"2026-10-27","epss":0.00269,"percentile":0.18905}],"risk":0.21116500000000002,"urls":["https://github.com/isaacs/node-tar/security/advisories/GHSA-9ppj-qmqm-q256","https://nvd.nist.gov/vuln/detail/CVE-2026-31802","https://github.com/isaacs/node-tar/commit/f48b5fa3b7985ddab96dc0f2125a4ffc9911b6ad"],"severity":"High","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9ppj-qmqm-q256","description":"node-tar Symlink Path Traversal via Drive-Relative Linkpath"},"relatedVulnerabilities":[{"id":"CVE-2026-31802","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-31802","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-31802","date":"2026-10-27","epss":0.00269,"percentile":0.18905}],"urls":["https://github.com/isaacs/node-tar/commit/f48b5fa3b7985ddab96dc0f2125a4ffc9911b6ad","https://github.com/isaacs/node-tar/security/advisories/GHSA-9ppj-qmqm-q256"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-31802","description":"node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This vulnerability is fixed in 7.5.11."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4786","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4786","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-4786","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.5rc1","3.15.0b1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b1"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.13.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-07-02","kind":"first-observed","version":"3.15.0b1"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","metrics":{"baseScore":7.1,"impactScore":5.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4786","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-4786","cwe":"CWE-88","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-4786","date":"2026-10-27","epss":0.0029,"percentile":0.21439}],"risk":0.210975,"urls":["https://github.com/python/cpython/commit/28b4ad38067bbdad34edfcd03ad2de5f06387e53","https://github.com/python/cpython/commit/a4d3edf3a6ecfde504d02126410d2a65a859b744","https://github.com/python/cpython/commit/c5767a72838a8dda9d6dc5d3558075b055c56bca","https://github.com/python/cpython/commit/d22922c8a7958353689dc4763dd72da2dea03fff","https://github.com/python/cpython/commit/d6d68494be70bdbda20f89f83801ba52ec37daa4","https://github.com/python/cpython/commit/f4654824ae0850ac87227fb270f9057477946769","https://github.com/python/cpython/issues/148169","https://github.com/python/cpython/pull/148170","https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/","https://access.redhat.com/errata/RHSA-2026:10117","https://access.redhat.com/errata/RHSA-2026:10140","https://access.redhat.com/errata/RHSA-2026:10141","https://access.redhat.com/errata/RHSA-2026:10711","https://access.redhat.com/errata/RHSA-2026:10745","https://access.redhat.com/errata/RHSA-2026:10774","https://access.redhat.com/errata/RHSA-2026:10949","https://access.redhat.com/errata/RHSA-2026:10950","https://access.redhat.com/errata/RHSA-2026:11062","https://access.redhat.com/errata/RHSA-2026:11077","https://access.redhat.com/errata/RHSA-2026:11768","https://access.redhat.com/errata/RHSA-2026:13692","https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:14652","https://access.redhat.com/errata/RHSA-2026:14653","https://access.redhat.com/errata/RHSA-2026:14656","https://access.redhat.com/errata/RHSA-2026:16699","https://access.redhat.com/errata/RHSA-2026:17525","https://access.redhat.com/errata/RHSA-2026:17619","https://access.redhat.com/errata/RHSA-2026:19019","https://access.redhat.com/errata/RHSA-2026:19064","https://access.redhat.com/errata/RHSA-2026:19175","https://access.redhat.com/errata/RHSA-2026:19176","https://access.redhat.com/errata/RHSA-2026:19177","https://access.redhat.com/errata/RHSA-2026:19216","https://access.redhat.com/errata/RHSA-2026:19549","https://access.redhat.com/errata/RHSA-2026:19570","https://access.redhat.com/errata/RHSA-2026:19571","https://access.redhat.com/errata/RHSA-2026:19576","https://access.redhat.com/errata/RHSA-2026:19589","https://access.redhat.com/errata/RHSA-2026:19590","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:21682","https://access.redhat.com/errata/RHSA-2026:22144","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:26187","https://access.redhat.com/errata/RHSA-2026:28247","https://access.redhat.com/errata/RHSA-2026:28581","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:35838","https://access.redhat.com/errata/RHSA-2026:8822","https://access.redhat.com/errata/RHSA-2026:8824","https://access.redhat.com/errata/RHSA-2026:9228","https://access.redhat.com/security/cve/CVE-2026-4786","https://bugzilla.redhat.com/show_bug.cgi?id=2458049","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4786.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4786","description":"Mitgation of CVE-2026-4519 was incomplete. If the URL contained \"%action\" the mitigation could be bypassed for certain browser types the \"webbrowser.open()\" API could have commands injected into the underlying shell. See CVE-2026-4519 for details."},"relatedVulnerabilities":[]},{"artifact":{"id":"df9a817b3a9aa35b","cpes":["cpe:2.3:a:libtirpc-common:libtirpc-common:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libtirpc-common:libtirpc_common:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libtirpc_common:libtirpc-common:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libtirpc_common:libtirpc_common:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libtirpc:libtirpc-common:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libtirpc:libtirpc_common:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*"],"name":"libtirpc-common","purl":"pkg:deb/ubuntu/libtirpc-common@1.3.2-2ubuntu0.1?arch=all&distro=ubuntu-22.04&upstream=libtirpc","type":"deb","version":"1.3.2-2ubuntu0.1","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtirpc-common/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libtirpc-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtirpc-common.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libtirpc-common.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtirpc-common.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libtirpc-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtirpc-common.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libtirpc-common.list"}],"upstreams":[{"name":"libtirpc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-85977","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"libtirpc","version":"1.3.2-2ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-85977","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-85977","cwe":"CWE-1050","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-85977","date":"2026-10-27","epss":0.0042,"percentile":0.36154}],"risk":0.21,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-85977"},"relatedVulnerabilities":[{"id":"CVE-2026-85977","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85977","cwe":"CWE-1050","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-85977","date":"2026-10-27","epss":0.0042,"percentile":0.36154}],"urls":["https://access.redhat.com/errata/RHSA-2026:80360","https://access.redhat.com/security/cve/CVE-2026-85977","https://bugzilla.redhat.com/show_bug.cgi?id=2478979"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-85977","description":"A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation, causing the client process to experience a Denial of Service (DoS) due to resource exhaustion."}]},{"artifact":{"id":"5547b4e7ac45ea0d","cpes":["cpe:2.3:a:libtirpc3:libtirpc3:1.3.2-2ubuntu0.1:*:*:*:*:*:*:*"],"name":"libtirpc3","purl":"pkg:deb/ubuntu/libtirpc3@1.3.2-2ubuntu0.1?arch=amd64&distro=ubuntu-22.04&upstream=libtirpc","type":"deb","version":"1.3.2-2ubuntu0.1","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtirpc3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libtirpc3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtirpc3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libtirpc3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libtirpc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-85977","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"libtirpc","version":"1.3.2-2ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-85977","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-85977","cwe":"CWE-1050","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-85977","date":"2026-10-27","epss":0.0042,"percentile":0.36154}],"risk":0.21,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-85977"},"relatedVulnerabilities":[{"id":"CVE-2026-85977","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85977","cwe":"CWE-1050","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-85977","date":"2026-10-27","epss":0.0042,"percentile":0.36154}],"urls":["https://access.redhat.com/errata/RHSA-2026:80360","https://access.redhat.com/security/cve/CVE-2026-85977","https://bugzilla.redhat.com/show_bug.cgi?id=2478979"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-85977","description":"A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation, causing the client process to experience a Denial of Service (DoS) due to resource exhaustion."}]},{"artifact":{"id":"7d3b1ce89ddbfc24","cpes":["cpe:2.3:a:perl-base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.34.0-3ubuntu1.2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.34.0-3ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=perl","type":"deb","version":"5.34.0-3ubuntu1.2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.34.0-3ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"< 5.34.0-3ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"perl","version":"5.34.0-3ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"fixed","versions":["5.34.0-3ubuntu1.9"],"available":[{"date":"2026-09-08","kind":"advisory","version":"5.34.0-3ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-27","epss":0.00418,"percentile":0.35957}],"risk":0.209,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19487"},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-27","epss":0.00418,"percentile":0.35957}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4360","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4360","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-4360","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b4"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b4"},{"date":"2026-09-15","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-15","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-15","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-15","kind":"first-observed","version":"3.15.0b4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4360","cwe":"CWE-281","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-4360","date":"2026-10-27","epss":0.00481,"percentile":0.41261}],"risk":0.2080325,"urls":["https://github.com/python/cpython/commit/0367912be336348b30572f8029cec4a282782d92","https://github.com/python/cpython/commit/5e0ef3f1afe892e4f64eb83368db57ac4c40cba0","https://github.com/python/cpython/commit/7b57e8d51446297b8c7c482d224bc5f1938e4301","https://github.com/python/cpython/commit/7ccdbaba2c54250a70d7f25632152df7655a5e0a","https://github.com/python/cpython/commit/cf23b9153181062150d061468b6d24af33fe214f","https://github.com/python/cpython/commit/d2b2f5eacab4dd48446b63340613b05dcbbf0b44","https://github.com/python/cpython/commit/eee3ddf0ca10283cc7fea724aae9cd8665f8d15e","https://github.com/python/cpython/issues/151987","https://github.com/python/cpython/pull/151988","https://mail.python.org/archives/list/security-announce@python.org/thread/TWZW2PC2AZOV6FENIHFSRC63OM7MBGSB/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4360","description":"In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function."},"relatedVulnerabilities":[]},{"artifact":{"id":"3a15d49164391229","cpes":["cpe:2.3:a:jupyter:nbconvert:7.9.2:*:*:*:*:python:*:*"],"name":"nbconvert","purl":"pkg:pypi/nbconvert@7.9.2","type":"python","version":"7.9.2","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/nbconvert-7.9.2.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/nbconvert-7.9.2.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/nbconvert-7.9.2.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/nbconvert-7.9.2.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/nbconvert-7.9.2.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/nbconvert-7.9.2.dist-info/direct_url.json","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.17.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-xm59-rqc7-hhvf","versionConstraint":"<7.17.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"nbconvert","version":"7.9.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-xm59-rqc7-hhvf","fix":{"state":"fixed","versions":["7.17.0"],"available":[{"date":"2026-02-10","kind":"first-observed","version":"7.17.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-53000","cwe":"CWE-427","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-53000","date":"2026-10-27","epss":0.0026,"percentile":0.17672}],"risk":0.208,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-53000","https://github.com/jupyter/nbconvert/blob/4f61702f5c7524d8a3c4ac0d5fc33a6ac2fa36a7/nbconvert/preprocessors/svg2pdf.py#L104","https://www.imperva.com/blog/code-execution-in-jupyter-notebook-exports","https://github.com/jupyter/nbconvert/issues/2258","https://github.com/jupyter/nbconvert/commit/c9ac1d1040459ed1ff9eb34e9918ce5a87cf9d71","https://github.com/jupyter/nbconvert/releases/tag/v7.17.0","https://github.com/jupyter/nbconvert/security/advisories/GHSA-xm59-rqc7-hhvf"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-xm59-rqc7-hhvf","description":"nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows"},"relatedVulnerabilities":[{"id":"CVE-2025-53000","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-53000","cwe":"CWE-427","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-53000","date":"2026-10-27","epss":0.0026,"percentile":0.17672}],"urls":["https://github.com/jupyter/nbconvert/blob/4f61702f5c7524d8a3c4ac0d5fc33a6ac2fa36a7/nbconvert/preprocessors/svg2pdf.py#L104","https://github.com/jupyter/nbconvert/commit/c9ac1d1040459ed1ff9eb34e9918ce5a87cf9d71","https://github.com/jupyter/nbconvert/issues/2258","https://github.com/jupyter/nbconvert/releases/tag/v7.17.0","https://github.com/jupyter/nbconvert/security/advisories/GHSA-xm59-rqc7-hhvf","https://www.imperva.com/blog/code-execution-in-jupyter-notebook-exports"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-53000","description":"The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6 on Windows have a vulnerability in which converting a notebook containing SVG output to a PDF results in unauthorized code execution. Specifically, a third party can create a `inkscape.bat` file that defines a Windows batch script, capable of arbitrary code execution. When a user runs `jupyter nbconvert --to pdf` on a notebook containing SVG output to a PDF on a Windows platform from this directory, the `inkscape.bat` file is run unexpectedly. This issue has been patched in version 7.17.0."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.15.0a6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15367","versionConstraint":"< 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.15.0a6"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-15367","versionConstraint":"< 3.15.0a6 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-15367","fix":{"state":"fixed","versions":["3.15.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a6"},{"date":"2026-03-03","kind":"first-observed","version":"3.15.0a6"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15367","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15367","date":"2026-10-27","epss":0.00377,"percentile":0.31507}],"risk":0.20546500000000004,"urls":["https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7","https://github.com/python/cpython/issues/143923","https://github.com/python/cpython/pull/143924","https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15367","description":"The poplib module, when passed a user-controlled command, can have\nadditional commands injected using newlines. Mitigation rejects commands\ncontaining control characters."},"relatedVulnerabilities":[]},{"artifact":{"id":"34ea66bcdaab73e8","cpes":["cpe:2.3:a:jose_padilla_project:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla_project:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla_project:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*"],"name":"pyjwt","purl":"pkg:pypi/pyjwt@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.12.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-752w-5fwx-jx9f","versionConstraint":"<=2.11.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"pyjwt","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-752w-5fwx-jx9f","fix":{"state":"fixed","versions":["2.12.0"],"available":[{"date":"2026-03-14","kind":"first-observed","version":"2.12.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-32597","cwe":"CWE-345","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-32597","cwe":"CWE-863","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-32597","cwe":"CWE-347","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-32597","date":"2026-10-27","epss":0.00273,"percentile":0.19597}],"risk":0.20475,"urls":["https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f","https://nvd.nist.gov/vuln/detail/CVE-2026-32597","https://lists.debian.org/debian-lts-announce/2026/05/msg00008.html","https://github.com/pypa/advisory-database/tree/main/vulns/pyjwt/PYSEC-2026-120.yaml"],"severity":"High","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-752w-5fwx-jx9f","description":"PyJWT accepts unknown `crit` header extensions"},"relatedVulnerabilities":[{"id":"CVE-2026-32597","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-32597","cwe":"CWE-345","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-32597","cwe":"CWE-863","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-32597","cwe":"CWE-347","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-32597","date":"2026-10-27","epss":0.00273,"percentile":0.19597}],"urls":["https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f","https://lists.debian.org/debian-lts-announce/2026/05/msg00008.html","https://access.redhat.com/errata/RHSA-2026:10140","https://access.redhat.com/errata/RHSA-2026:10141","https://access.redhat.com/errata/RHSA-2026:10184","https://access.redhat.com/errata/RHSA-2026:12176","https://access.redhat.com/errata/RHSA-2026:13508","https://access.redhat.com/errata/RHSA-2026:13512","https://access.redhat.com/errata/RHSA-2026:13545","https://access.redhat.com/errata/RHSA-2026:13553","https://access.redhat.com/errata/RHSA-2026:13672","https://access.redhat.com/errata/RHSA-2026:13916","https://access.redhat.com/errata/RHSA-2026:17083","https://access.redhat.com/errata/RHSA-2026:19138","https://access.redhat.com/errata/RHSA-2026:19355","https://access.redhat.com/errata/RHSA-2026:19375","https://access.redhat.com/errata/RHSA-2026:19712","https://access.redhat.com/errata/RHSA-2026:21431","https://access.redhat.com/errata/RHSA-2026:21517","https://access.redhat.com/errata/RHSA-2026:22330","https://access.redhat.com/errata/RHSA-2026:24977","https://access.redhat.com/errata/RHSA-2026:26226","https://access.redhat.com/errata/RHSA-2026:37275","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:6568","https://access.redhat.com/errata/RHSA-2026:6720","https://access.redhat.com/errata/RHSA-2026:6912","https://access.redhat.com/errata/RHSA-2026:6926","https://access.redhat.com/errata/RHSA-2026:8437","https://access.redhat.com/errata/RHSA-2026:8746","https://access.redhat.com/errata/RHSA-2026:8747","https://access.redhat.com/errata/RHSA-2026:8748","https://access.redhat.com/security/cve/CVE-2026-32597","https://bugzilla.redhat.com/show_bug.cgi?id=2447194","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32597.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-32597","description":"PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC. This vulnerability is fixed in 2.12.0."}]},{"artifact":{"id":"e68cc45a0b7ed402","cpes":["cpe:2.3:a:mike_bayer_project:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer_project:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayerproject:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayerproject:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_project:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_project:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer_project:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mikeproject:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mikeproject:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python-mako:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python-mako:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python_mako:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python_mako:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayerproject:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_project:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mako:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mako:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike:python-mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike:python_mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mikeproject:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python-mako:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python_mako:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike_bayer:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:python:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mako:mako:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:mike:mako:1.2.4:*:*:*:*:*:*:*"],"name":"mako","purl":"pkg:pypi/mako@1.2.4","type":"python","version":"1.2.4","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Mako-1.2.4.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.4.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5639-2j2p-m4mx","versionConstraint":"<=1.4.1 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mako","version":"1.2.4"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-5639-2j2p-m4mx","fix":{"state":"fixed","versions":["1.4.2"],"available":[{"date":"2026-10-06","kind":"first-observed","version":"1.4.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102991","cwe":"CWE-22","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102991","date":"2026-10-27","epss":0.00356,"percentile":0.29148}],"risk":0.20469999999999997,"urls":["https://github.com/sqlalchemy/mako/security/advisories/GHSA-5639-2j2p-m4mx","https://nvd.nist.gov/vuln/detail/CVE-2026-102991","https://github.com/sqlalchemy/mako/issues/441","https://github.com/sqlalchemy/mako/commit/000ed85e4e48771eff460bf4fc721fb43de80e08","https://github.com/sqlalchemy/mako/releases/tag/rel_1_4_2"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5639-2j2p-m4mx","description":"Mako: Path traversal via drive-letter URI on Windows in TemplateLookup"},"relatedVulnerabilities":[{"id":"CVE-2026-102991","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102991","cwe":"CWE-22","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-102991","date":"2026-10-27","epss":0.00356,"percentile":0.29148}],"urls":["https://github.com/sqlalchemy/mako/commit/000ed85e4e48771eff460bf4fc721fb43de80e08","https://github.com/sqlalchemy/mako/issues/441","https://github.com/sqlalchemy/mako/releases/tag/rel_1_4_2","https://github.com/sqlalchemy/mako/security/advisories/GHSA-5639-2j2p-m4mx"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102991","description":"Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.get_template() in mako/lookup.py resolves template URIs with posixpath, while Template.__init__() in mako/template.py validates them with os.path, which uses ntpath. A URI beginning with a drive designator causes ntpath to absorb the traversal segments before the leading dot-dot check, while posixpath resolution can escape the configured template directory. An application that passes attacker-controlled template names or include paths can disclose process-readable files on the same volume, and a targeted file containing Mako template syntax may also be parsed and executed as a template. Raw URL paths are generally normalized before reaching this form, but query strings, form or JSON bodies, route parameters, and dynamic include expressions can preserve it. This issue is fixed in version 1.4.2."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33602","versionConstraint":"< 2.35-0ubuntu3.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-33602","fix":{"state":"fixed","versions":["2.35-0ubuntu3.8"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.35-0ubuntu3.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33602","cwe":"CWE-466","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33602","date":"2026-10-27","epss":0.00403,"percentile":0.34381}],"risk":0.20149999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33602"},"relatedVulnerabilities":[{"id":"CVE-2024-33602","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.9,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33602","cwe":"CWE-466","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33602","date":"2026-10-27","epss":0.00403,"percentile":0.34381}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0012/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33602","description":"nscd: netgroup cache assumes NSS callback uses in-buffer strings\n\nThe Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory\nwhen the NSS callback does not store all strings in the provided buffer.\nThe flaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33602","versionConstraint":"< 2.35-0ubuntu3.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-33602","fix":{"state":"fixed","versions":["2.35-0ubuntu3.8"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.35-0ubuntu3.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33602","cwe":"CWE-466","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33602","date":"2026-10-27","epss":0.00403,"percentile":0.34381}],"risk":0.20149999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33602"},"relatedVulnerabilities":[{"id":"CVE-2024-33602","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.9,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33602","cwe":"CWE-466","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33602","date":"2026-10-27","epss":0.00403,"percentile":0.34381}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0012/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33602","description":"nscd: netgroup cache assumes NSS callback uses in-buffer strings\n\nThe Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory\nwhen the NSS callback does not store all strings in the provided buffer.\nThe flaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33602","versionConstraint":"< 2.35-0ubuntu3.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-33602","fix":{"state":"fixed","versions":["2.35-0ubuntu3.8"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.35-0ubuntu3.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33602","cwe":"CWE-466","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33602","date":"2026-10-27","epss":0.00403,"percentile":0.34381}],"risk":0.20149999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33602"},"relatedVulnerabilities":[{"id":"CVE-2024-33602","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.9,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33602","cwe":"CWE-466","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33602","date":"2026-10-27","epss":0.00403,"percentile":0.34381}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0012/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0008","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33602","description":"nscd: netgroup cache assumes NSS callback uses in-buffer strings\n\nThe Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory\nwhen the NSS callback does not store all strings in the provided buffer.\nThe flaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.23"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28387","versionConstraint":"< 3.0.2-0ubuntu1.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-28387","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.23"],"available":[{"date":"2026-04-08","kind":"advisory","version":"3.0.2-0ubuntu1.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-27","epss":0.00671,"percentile":0.5182}],"risk":0.2013,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28387"},"relatedVulnerabilities":[{"id":"CVE-2026-28387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-27","epss":0.00671,"percentile":0.5182}],"urls":["https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b","https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe","https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3","https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7","https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28387","description":"Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.23"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28387","versionConstraint":"< 3.0.2-0ubuntu1.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-28387","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.23"],"available":[{"date":"2026-04-08","kind":"advisory","version":"3.0.2-0ubuntu1.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-27","epss":0.00671,"percentile":0.5182}],"risk":0.2013,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28387"},"relatedVulnerabilities":[{"id":"CVE-2026-28387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-27","epss":0.00671,"percentile":0.5182}],"urls":["https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b","https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe","https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3","https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7","https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28387","description":"Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary."}]},{"artifact":{"id":"c0b145b45a6f9d3f","cpes":["cpe:2.3:a:wget:wget:1.21.2-2ubuntu1:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/ubuntu/wget@1.21.2-2ubuntu1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"1.21.2-2ubuntu1","language":"","licenses":["sha256:c58cb5a2d94f35f0e9b0f1a038d48b73477aa12782ff17328c21d8a86f5f99d5"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.21.2-2ubuntu1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-58471","versionConstraint":"< 1.21.2-2ubuntu1.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"wget","version":"1.21.2-2ubuntu1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-58471","fix":{"state":"fixed","versions":["1.21.2-2ubuntu1.3"],"available":[{"date":"2026-07-14","kind":"advisory","version":"1.21.2-2ubuntu1.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-58471","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58471","date":"2026-10-27","epss":0.0039,"percentile":0.32892}],"risk":0.19499999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58471"},"relatedVulnerabilities":[{"id":"CVE-2026-58471","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58471","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58471","date":"2026-10-27","epss":0.0039,"percentile":0.32892}],"urls":["https://gitlab.com/gnuwget/wget/-/commit/c2640fe5171c59f87c58dc9fcb195b2d18b010ee","https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-convert-fname-in-url-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58471","description":"GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response."}]},{"artifact":{"id":"c0b145b45a6f9d3f","cpes":["cpe:2.3:a:wget:wget:1.21.2-2ubuntu1:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/ubuntu/wget@1.21.2-2ubuntu1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"1.21.2-2ubuntu1","language":"","licenses":["sha256:c58cb5a2d94f35f0e9b0f1a038d48b73477aa12782ff17328c21d8a86f5f99d5"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.21.2-2ubuntu1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-58472","versionConstraint":"< 1.21.2-2ubuntu1.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"wget","version":"1.21.2-2ubuntu1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-58472","fix":{"state":"fixed","versions":["1.21.2-2ubuntu1.3"],"available":[{"date":"2026-07-14","kind":"advisory","version":"1.21.2-2ubuntu1.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-58472","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58472","date":"2026-10-27","epss":0.0039,"percentile":0.32892}],"risk":0.19499999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58472"},"relatedVulnerabilities":[{"id":"CVE-2026-58472","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58472","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58472","date":"2026-10-27","epss":0.0039,"percentile":0.32892}],"urls":["https://gitlab.com/gnuwget/wget/-/commit/dd692d9cea5335b181d877ae917fe6e75587a812","https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-html-attribute-encoding"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58472","description":"GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase."}]},{"artifact":{"id":"ba0cc4fa08dfd1a9","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.3-4ubuntu1.2:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.7.3-4ubuntu1.2?arch=amd64&distro=ubuntu-22.04&upstream=gnutls28","type":"deb","version":"3.7.3-4ubuntu1.2","language":"","licenses":["sha256:c2a08ee31ea9f0a4fc0f4d590c5481f5b7fc2d325b04ae74c719fa7894dcbdd7"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.3-4ubuntu1.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28835","versionConstraint":"< 3.7.3-4ubuntu1.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"gnutls28","version":"3.7.3-4ubuntu1.2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-28835","fix":{"state":"fixed","versions":["3.7.3-4ubuntu1.5"],"available":[{"date":"2024-04-15","kind":"advisory","version":"3.7.3-4ubuntu1.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28835","cwe":"CWE-248","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-28835","date":"2026-10-27","epss":0.00389,"percentile":0.32842}],"risk":0.19449999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28835"},"relatedVulnerabilities":[{"id":"CVE-2024-28835","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28835","cwe":"CWE-248","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-28835","date":"2026-10-27","epss":0.00389,"percentile":0.32842}],"urls":["https://access.redhat.com/errata/RHSA-2024:1879","https://access.redhat.com/errata/RHSA-2024:2570","https://access.redhat.com/errata/RHSA-2024:2889","https://access.redhat.com/security/cve/CVE-2024-28835","https://bugzilla.redhat.com/show_bug.cgi?id=2269084","https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html","http://www.openwall.com/lists/oss-security/2024/03/22/1","http://www.openwall.com/lists/oss-security/2024/03/22/2","https://lists.debian.org/debian-lts-announce/2024/09/msg00019.html","https://security.netapp.com/advisory/ntap-20241122-0009/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28835","description":"A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the \"certtool --verify-chain\" command."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4046","versionConstraint":"< 2.35-0ubuntu3.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-4046","fix":{"state":"fixed","versions":["2.35-0ubuntu3.14"],"available":[{"date":"2026-07-27","kind":"advisory","version":"2.35-0ubuntu3.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-27","epss":0.00389,"percentile":0.32787}],"risk":0.19449999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-4046"},"relatedVulnerabilities":[{"id":"CVE-2026-4046","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-27","epss":0.00389,"percentile":0.32787}],"urls":["https://inbox.sourceware.org/libc-announce/76814edf-cf7f-47ec-979d-2dce0a2c76bf@gotplt.org/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=33980","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4046","description":"The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.\n\n\n\nThis vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4046","versionConstraint":"< 2.35-0ubuntu3.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-4046","fix":{"state":"fixed","versions":["2.35-0ubuntu3.14"],"available":[{"date":"2026-07-27","kind":"advisory","version":"2.35-0ubuntu3.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-27","epss":0.00389,"percentile":0.32787}],"risk":0.19449999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-4046"},"relatedVulnerabilities":[{"id":"CVE-2026-4046","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-27","epss":0.00389,"percentile":0.32787}],"urls":["https://inbox.sourceware.org/libc-announce/76814edf-cf7f-47ec-979d-2dce0a2c76bf@gotplt.org/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=33980","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4046","description":"The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.\n\n\n\nThis vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4046","versionConstraint":"< 2.35-0ubuntu3.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-4046","fix":{"state":"fixed","versions":["2.35-0ubuntu3.14"],"available":[{"date":"2026-07-27","kind":"advisory","version":"2.35-0ubuntu3.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-27","epss":0.00389,"percentile":0.32787}],"risk":0.19449999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-4046"},"relatedVulnerabilities":[{"id":"CVE-2026-4046","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-27","epss":0.00389,"percentile":0.32787}],"urls":["https://inbox.sourceware.org/libc-announce/76814edf-cf7f-47ec-979d-2dce0a2c76bf@gotplt.org/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=33980","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4046","description":"The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.\n\n\n\nThis vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them."}]},{"artifact":{"id":"45f87362b5437c73","cpes":["cpe:2.3:a:hsiaoming_yang_\\<me_project:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:mistune:3.0.1:*:*:*:*:*:*:*"],"name":"mistune","purl":"pkg:pypi/mistune@3.0.1","type":"python","version":"3.0.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.3.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8c25-4j27-2rv3","versionConstraint":"<3.3.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mistune","version":"3.0.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-8c25-4j27-2rv3","fix":{"state":"fixed","versions":["3.3.0"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"3.3.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59923","cwe":"CWE-79","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59923","date":"2026-10-27","epss":0.00348,"percentile":0.28245}],"risk":0.19313999999999998,"urls":["https://github.com/lepture/mistune/security/advisories/GHSA-8c25-4j27-2rv3","https://nvd.nist.gov/vuln/detail/CVE-2026-59923","https://github.com/lepture/mistune/commit/c7101fcbb6e8790e8e39157c5ca2238fc6dd6cbc","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/pypa/advisory-database/tree/main/vulns/mistune/PYSEC-2026-2211.yaml"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8c25-4j27-2rv3","description":"Mistune: XSS via percent-encoded javascript URI bypass in safe_url()"},"relatedVulnerabilities":[{"id":"CVE-2026-59923","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59923","cwe":"CWE-79","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59923","date":"2026-10-27","epss":0.00348,"percentile":0.28245}],"urls":["https://github.com/lepture/mistune/commit/c7101fcbb6e8790e8e39157c5ca2238fc6dd6cbc","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/lepture/mistune/security/advisories/GHSA-8c25-4j27-2rv3"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59923","description":"Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safe_url() does not block percent-encoded javascript URIs, allowing attacker-supplied Markdown links or images to bypass URL protections and execute script in rendered HTML. This issue is fixed in version 3.3.0."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.13"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0861","versionConstraint":"< 2.35-0ubuntu3.13 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-0861","fix":{"state":"fixed","versions":["2.35-0ubuntu3.13"],"available":[{"date":"2026-02-03","kind":"advisory","version":"2.35-0ubuntu3.13"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-0861","cwe":"CWE-190","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0861","date":"2026-10-27","epss":0.00386,"percentile":0.32518}],"risk":0.193,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0861"},"relatedVulnerabilities":[{"id":"CVE-2026-0861","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.4,"impactScore":5.9,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0861","cwe":"CWE-190","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0861","date":"2026-10-27","epss":0.00386,"percentile":0.32518}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33796","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0001","http://www.openwall.com/lists/oss-security/2026/01/16/5"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0861","description":"Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption.\n\nNote that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this.  The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument.  This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc.\n\nTypically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice.  An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.13"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0861","versionConstraint":"< 2.35-0ubuntu3.13 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-0861","fix":{"state":"fixed","versions":["2.35-0ubuntu3.13"],"available":[{"date":"2026-02-03","kind":"advisory","version":"2.35-0ubuntu3.13"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-0861","cwe":"CWE-190","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0861","date":"2026-10-27","epss":0.00386,"percentile":0.32518}],"risk":0.193,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0861"},"relatedVulnerabilities":[{"id":"CVE-2026-0861","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.4,"impactScore":5.9,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0861","cwe":"CWE-190","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0861","date":"2026-10-27","epss":0.00386,"percentile":0.32518}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33796","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0001","http://www.openwall.com/lists/oss-security/2026/01/16/5"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0861","description":"Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption.\n\nNote that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this.  The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument.  This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc.\n\nTypically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice.  An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.13"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0861","versionConstraint":"< 2.35-0ubuntu3.13 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-0861","fix":{"state":"fixed","versions":["2.35-0ubuntu3.13"],"available":[{"date":"2026-02-03","kind":"advisory","version":"2.35-0ubuntu3.13"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-0861","cwe":"CWE-190","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0861","date":"2026-10-27","epss":0.00386,"percentile":0.32518}],"risk":0.193,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0861"},"relatedVulnerabilities":[{"id":"CVE-2026-0861","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.4,"impactScore":5.9,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0861","cwe":"CWE-190","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0861","date":"2026-10-27","epss":0.00386,"percentile":0.32518}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33796","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0001","http://www.openwall.com/lists/oss-security/2026/01/16/5"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0861","description":"Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption.\n\nNote that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this.  The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument.  This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc.\n\nTypically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice.  An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments."}]},{"artifact":{"id":"64d2b29cb52cf5e7","cpes":["cpe:2.3:a:bash:bash:5.1-6ubuntu1:*:*:*:*:*:*:*"],"name":"bash","purl":"pkg:deb/ubuntu/bash@5.1-6ubuntu1?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"5.1-6ubuntu1","language":"","licenses":["sha256:da7a8d93abf1eccdeaf326642c8ce9ed760f3a973ca46f3f69b3cf755bb81ade"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/bash/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/bash/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/bash.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/bash.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/bash.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/bash.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/bash.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/bash.list"},{"path":"/var/lib/dpkg/info/bash.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/bash.postinst"},{"path":"/var/lib/dpkg/info/bash.postrm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/bash.postrm"},{"path":"/var/lib/dpkg/info/bash.prerm","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/bash.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"5.1-6ubuntu1.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-3715","versionConstraint":"< 5.1-6ubuntu1.1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"bash","version":"5.1-6ubuntu1"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2022-3715","fix":{"state":"fixed","versions":["5.1-6ubuntu1.1"],"available":[{"date":"2024-03-18","kind":"advisory","version":"5.1-6ubuntu1.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2022-3715","cwe":"CWE-119","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-3715","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3715","date":"2026-10-27","epss":0.00384,"percentile":0.32313}],"risk":0.192,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-3715"},"relatedVulnerabilities":[{"id":"CVE-2022-3715","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3715","cwe":"CWE-119","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-3715","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3715","date":"2026-10-27","epss":0.00384,"percentile":0.32313}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2126720","https://security.netapp.com/advisory/ntap-20241108-0002/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3715","description":"A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems."}]},{"artifact":{"id":"34ea66bcdaab73e8","cpes":["cpe:2.3:a:jose_padilla_project:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla_project:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla_project:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padillaproject:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello_project:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:helloproject:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:jose_padilla:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:python-pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:python_pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python-pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python_pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:python:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:hello:pyjwt:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:pyjwt:pyjwt:2.8.0:*:*:*:*:*:*:*"],"name":"pyjwt","purl":"pkg:pypi/pyjwt@2.8.0","type":"python","version":"2.8.0","language":"python","licenses":["MIT"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.13.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-w7vc-732c-9m39","versionConstraint":">=2.8.0,<=2.12.1 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"pyjwt","version":"2.8.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-w7vc-732c-9m39","fix":{"state":"fixed","versions":["2.13.0"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"2.13.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48525","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-48525","date":"2026-10-27","epss":0.0037,"percentile":0.3078}],"risk":0.19055,"urls":["https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w7vc-732c-9m39","https://nvd.nist.gov/vuln/detail/CVE-2026-48525","https://github.com/pypa/advisory-database/tree/main/vulns/pyjwt/PYSEC-2026-178.yaml"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-w7vc-732c-9m39","description":"PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS"},"relatedVulnerabilities":[{"id":"CVE-2026-48525","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48525","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-48525","date":"2026-10-27","epss":0.0037,"percentile":0.3078}],"urls":["https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w7vc-732c-9m39"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48525","description":"PyJWT is a JSON Web Token implementation in Python. From 2.8.0 to 2.12.1, when verifying detached JWS tokens using the unencoded-payload option (\"b64\": false, RFC 7797), PyJWT performs Base64URL decoding of the compact-serialization payload segment before enforcing the detached-payload rules. For b64=false, PyJWT later discards that decoded payload and replaces it with the caller-provided detached_payload. In practice, this turns the middle segment into an attacker-controlled “work amplifier”: a remote client can supply an arbitrarily large Base64URL payload segment that forces CPU work + memory allocations even if the signature is invalid. This creates an unauthenticated DoS vector against any endpoint that verifies detached JWS using PyJWT. This vulnerability is fixed in 2.13.0."}]},{"artifact":{"id":"45f87362b5437c73","cpes":["cpe:2.3:a:hsiaoming_yang_\\<me_project:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me_project:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<meproject:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming-yang-\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:hsiaoming_yang_\\<me:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python-mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python_mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mistune:mistune:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:python:mistune:3.0.1:*:*:*:*:*:*:*"],"name":"mistune","purl":"pkg:pypi/mistune@3.0.1","type":"python","version":"3.0.1","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/mistune-3.0.1.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.3.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qfrw-5rxm-mhh2","versionConstraint":"<3.3.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"mistune","version":"3.0.1"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-qfrw-5rxm-mhh2","fix":{"state":"fixed","versions":["3.3.0"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"3.3.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59929","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59929","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59929","date":"2026-10-27","epss":0.00341,"percentile":0.27486}],"risk":0.18925499999999998,"urls":["https://github.com/lepture/mistune/security/advisories/GHSA-qfrw-5rxm-mhh2","https://nvd.nist.gov/vuln/detail/CVE-2026-59929","https://github.com/lepture/mistune/commit/c7101fcbb6e8790e8e39157c5ca2238fc6dd6cbc","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/pypa/advisory-database/tree/main/vulns/mistune/PYSEC-2026-2217.yaml"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qfrw-5rxm-mhh2","description":"Mistune renderers/html.safe_url: HARMFUL_PROTOCOLS list misses legacy and chained schemes that historically chain to `javascript:` execution"},"relatedVulnerabilities":[{"id":"CVE-2026-59929","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59929","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59929","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59929","date":"2026-10-27","epss":0.00341,"percentile":0.27486}],"urls":["https://github.com/lepture/mistune/commit/c7101fcbb6e8790e8e39157c5ca2238fc6dd6cbc","https://github.com/lepture/mistune/releases/tag/v3.3.0","https://github.com/lepture/mistune/security/advisories/GHSA-qfrw-5rxm-mhh2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59929","description":"Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the safe_url filter in src/mistune/renderers/html.py blocks only javascript:, vbscript:, file:, and data: schemes, allowing legacy or chained schemes such as feed:, view-source:, jar:, livescript:, mocha:, ms-its:, mk:, and res: to reach rendered href and src attributes and potentially execute script in affected user agents. This issue is fixed in version 3.3.0."}]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.8"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-0450","versionConstraint":"< 3.8.19||>= 3.10.0, < 3.10.14||>= 3.11.0, < 3.11.8||>= 3.12.0, < 3.12.2||>= 3.13.0a1, < 3.13.0a3||>= 3.9.0, < 3.9.19 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.8"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-0450","versionConstraint":"< 3.8.19||>= 3.10.0, < 3.10.14||>= 3.11.0, < 3.11.8||>= 3.12.0, < 3.12.2||>= 3.13.0a1, < 3.13.0a3||>= 3.9.0, < 3.9.19 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-0450","fix":{"state":"fixed","versions":["3.8.19","3.9.19","3.10.14","3.11.8","3.12.2","3.13.0a3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.19"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.8"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.2"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0a3"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.19"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.19"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.14"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.8"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.2"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0a3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.19"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0450","cwe":"CWE-405","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2024-0450","date":"2026-10-27","epss":0.00336,"percentile":0.26841}],"risk":0.18816000000000002,"urls":["http://www.openwall.com/lists/oss-security/2024/03/20/5","https://github.com/python/cpython/commit/30fe5d853b56138dbec62432d370a1f99409fc85","https://github.com/python/cpython/commit/66363b9a7b9fe7c99eba3a185b74c5fdbf842eba","https://github.com/python/cpython/commit/70497218351ba44bffc8b571201ecb5652d84675","https://github.com/python/cpython/commit/a2c59992e9e8d35baba9695eb186ad6c6ff85c51","https://github.com/python/cpython/commit/a956e510f6336d5ae111ba429a61c3ade30a7549","https://github.com/python/cpython/commit/d05bac0b74153beb541b88b4fca33bf053990183","https://github.com/python/cpython/commit/fa181fcf2156f703347b03a3b1966ce47be8ab3b","https://github.com/python/cpython/issues/109858","https://lists.debian.org/debian-lts-announce/2024/03/msg00024.html","https://lists.debian.org/debian-lts-announce/2024/03/msg00025.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T3IGRX54M7RNCQOXVQO5KQKTGWCOABIM/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5VHWS52HGD743C47UMCSAK2A773M2YE/","https://mail.python.org/archives/list/security-announce@python.org/thread/XELNUX2L3IOHBTFU7RQHCY6OUVEWZ2FG/","https://www.bamsoftware.com/hacks/zipbomb/","https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20250411-0005/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0450","description":"An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.\n\nThe zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive."},"relatedVulnerabilities":[]},{"artifact":{"id":"dd0e8093999e619e","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.6","type":"binary","version":"3.11.6","language":"","licenses":[],"locations":[{"path":"/opt/conda/bin/python3.11","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/bin/python3.11","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/libpython3.11.so.1.0","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.15.0rc3"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-12345","versionConstraint":"< 3.15.0rc3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.15.0rc3"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-12345","versionConstraint":"< 3.15.0rc3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.6:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.6"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-12345","fix":{"state":"fixed","versions":["3.15.0rc3"],"available":[{"date":"2026-10-08","kind":"first-observed","version":"3.15.0rc3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12345","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-12345","date":"2026-10-27","epss":0.00344,"percentile":0.2775}],"risk":0.18748,"urls":["https://github.com/python/cpython/commit/0478b52788117db4b831b3efd648f56b777628aa","https://github.com/python/cpython/commit/06ef3d43fdaf4da97af12fa694b4886092c4b970","https://github.com/python/cpython/commit/458e7134a5af7f86aee9d21b51cf499b41aa4420","https://github.com/python/cpython/commit/58ed0259cae509a19138795df302fe60b544dc74","https://github.com/python/cpython/commit/5c20517a4fc56683efe63a7751020db9573f538d","https://github.com/python/cpython/commit/c39b52d00b42200aaadff679e2fe3f1006d57c58","https://github.com/python/cpython/commit/e1f3590f155c6d66007e958c98c9d69316551993","https://github.com/python/cpython/issues/157579","https://github.com/python/cpython/pull/157580","http://www.openwall.com/lists/oss-security/2026/09/29/40"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12345","description":"The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms."},"relatedVulnerabilities":[]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.12"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-2975","versionConstraint":"< 3.0.2-0ubuntu1.12 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-2975","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.12"],"available":[{"date":"2023-10-24","kind":"advisory","version":"3.0.2-0ubuntu1.12"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-2975","cwe":"CWE-354","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-2975","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-2975","date":"2026-10-27","epss":0.00622,"percentile":0.49593}],"risk":0.1866,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-2975"},"relatedVulnerabilities":[{"id":"CVE-2023-2975","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2975","cwe":"CWE-354","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-2975","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-2975","date":"2026-10-27","epss":0.00622,"percentile":0.49593}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc","https://www.openssl.org/news/secadv/20230714.txt","http://www.openwall.com/lists/oss-security/2023/07/15/1","http://www.openwall.com/lists/oss-security/2023/07/19/5","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230725-0004/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-2975","description":"Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.12"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-2975","versionConstraint":"< 3.0.2-0ubuntu1.12 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-2975","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.12"],"available":[{"date":"2023-10-24","kind":"advisory","version":"3.0.2-0ubuntu1.12"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-2975","cwe":"CWE-354","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-2975","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-2975","date":"2026-10-27","epss":0.00622,"percentile":0.49593}],"risk":0.1866,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-2975"},"relatedVulnerabilities":[{"id":"CVE-2023-2975","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2975","cwe":"CWE-354","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-2975","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-2975","date":"2026-10-27","epss":0.00622,"percentile":0.49593}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc","https://www.openssl.org/news/secadv/20230714.txt","http://www.openwall.com/lists/oss-security/2023/07/15/1","http://www.openwall.com/lists/oss-security/2023/07/19/5","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230725-0004/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-2975","description":"Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.29"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-54874","versionConstraint":"< 3.0.2-0ubuntu1.29 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-54874","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.29"],"available":[{"date":"2026-08-25","kind":"advisory","version":"3.0.2-0ubuntu1.29"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-54874","cwe":"CWE-405","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54874","date":"2026-10-27","epss":0.00622,"percentile":0.49585}],"risk":0.1866,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-54874"},"relatedVulnerabilities":[{"id":"CVE-2026-54874","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54874","cwe":"CWE-405","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54874","date":"2026-10-27","epss":0.00622,"percentile":0.49585}],"urls":["https://github.com/openssl/openssl/commit/4808b5d64176451f3d93d87d0ac9c81a9b13fb23","https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://github.com/openssl/openssl/commit/cc0c6710917cd5eec001b297355d2ba723505107","https://github.com/openssl/openssl/commit/f52ffc11b90737ac89083909618dc2e1f42c561c","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54874","description":"Issue summary: Receiving a DTLS record for a future epoch while a handshake\nis in progress causes OpenSSL to buffer far more memory than the record\nitself requires.\n\nImpact summary: A peer can use a small amount of network traffic to make an\nOpenSSL DTLS endpoint retain a disproportionately large amount of memory,\nwhich may lead to a Denial of Service.\n\nCWE: CWE-405: Asymmetric Resource Consumption (Amplification)\n\nDescription: While a DTLS handshake is in progress, a peer may legitimately\nhave already moved on to the next epoch (for example, having sent its\nChangeCipherSpec and Finished messages) before the local endpoint has\nprocessed the same transition, typically because of reordering on the\nunderlying UDP transport. OpenSSL buffers such early records so that they\ncan be processed once the local endpoint catches up.\n\nBuffering a record currently retains the entire read buffer it arrived in,\nwhich is sized to hold the largest possible DTLS record (around 16\nkilobytes), rather than just the bytes that make up the record itself. Up\nto 100 such records may be buffered per connection. As a result, a peer\nthat sends a stream of small forged records claiming to belong to the next\nepoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of\nmemory, despite sending only a small fraction of that amount of data over\nthe network.\n\nAn attacker therefore gains a memory amplification factor of around 1200,\nand can multiply the effect across as many associations as it is able to\nopen, making this a remote memory exhaustion Denial of Service risk for\nDTLS servers. Since the memory retained per connection remains bounded,\nand any limit an application already places on the number of concurrent\nassociations also bounds the total exposure, this issue has been assessed\nas Low severity.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary.\n\nOpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this\nissue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.2.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.4.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.8.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.7.\nOpenSSL 3.0 users should upgrade to OpenSSL 3.0.22.\n\nPremium support customers only:\nOpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi\nOpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr\n\nThis issue was reported on 18 May 2026 by Amazon Web Services.\nThe fix has been developed by Matt Caswell.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Amazon Web Services\nFixed by: Matt Caswell"}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.29"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-54874","versionConstraint":"< 3.0.2-0ubuntu1.29 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-54874","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.29"],"available":[{"date":"2026-08-25","kind":"advisory","version":"3.0.2-0ubuntu1.29"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-54874","cwe":"CWE-405","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54874","date":"2026-10-27","epss":0.00622,"percentile":0.49585}],"risk":0.1866,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-54874"},"relatedVulnerabilities":[{"id":"CVE-2026-54874","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54874","cwe":"CWE-405","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54874","date":"2026-10-27","epss":0.00622,"percentile":0.49585}],"urls":["https://github.com/openssl/openssl/commit/4808b5d64176451f3d93d87d0ac9c81a9b13fb23","https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://github.com/openssl/openssl/commit/cc0c6710917cd5eec001b297355d2ba723505107","https://github.com/openssl/openssl/commit/f52ffc11b90737ac89083909618dc2e1f42c561c","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54874","description":"Issue summary: Receiving a DTLS record for a future epoch while a handshake\nis in progress causes OpenSSL to buffer far more memory than the record\nitself requires.\n\nImpact summary: A peer can use a small amount of network traffic to make an\nOpenSSL DTLS endpoint retain a disproportionately large amount of memory,\nwhich may lead to a Denial of Service.\n\nCWE: CWE-405: Asymmetric Resource Consumption (Amplification)\n\nDescription: While a DTLS handshake is in progress, a peer may legitimately\nhave already moved on to the next epoch (for example, having sent its\nChangeCipherSpec and Finished messages) before the local endpoint has\nprocessed the same transition, typically because of reordering on the\nunderlying UDP transport. OpenSSL buffers such early records so that they\ncan be processed once the local endpoint catches up.\n\nBuffering a record currently retains the entire read buffer it arrived in,\nwhich is sized to hold the largest possible DTLS record (around 16\nkilobytes), rather than just the bytes that make up the record itself. Up\nto 100 such records may be buffered per connection. As a result, a peer\nthat sends a stream of small forged records claiming to belong to the next\nepoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of\nmemory, despite sending only a small fraction of that amount of data over\nthe network.\n\nAn attacker therefore gains a memory amplification factor of around 1200,\nand can multiply the effect across as many associations as it is able to\nopen, making this a remote memory exhaustion Denial of Service risk for\nDTLS servers. Since the memory retained per connection remains bounded,\nand any limit an application already places on the number of concurrent\nassociations also bounds the total exposure, this issue has been assessed\nas Low severity.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary.\n\nOpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this\nissue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.2.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.4.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.8.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.7.\nOpenSSL 3.0 users should upgrade to OpenSSL 3.0.22.\n\nPremium support customers only:\nOpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi\nOpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr\n\nThis issue was reported on 18 May 2026 by Amazon Web Services.\nThe fix has been developed by Matt Caswell.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Amazon Web Services\nFixed by: Matt Caswell"}]},{"artifact":{"id":"caa129f4dfb84903","cpes":["cpe:2.3:a:armin_ronacher_project:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher_project:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher_project:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacherproject:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin-ronacher:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:armin_ronacher:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python-jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python-jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:python_jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python_jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:jinja2:jinja2:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:python:jinja2:3.1.2:*:*:*:*:*:*:*"],"name":"jinja2","purl":"pkg:pypi/jinja2@3.1.2","type":"python","version":"3.1.2","language":"python","licenses":["BSD-3-Clause"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/METADATA","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/RECORD","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/direct_url.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/top_level.txt","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/python3.11/site-packages/Jinja2-3.1.2.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.1.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gmj6-6f8f-6699","versionConstraint":">=3.0.0,<=3.1.4 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"jinja2","version":"3.1.2"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-gmj6-6f8f-6699","fix":{"state":"fixed","versions":["3.1.5"],"available":[{"date":"2024-12-24","kind":"first-observed","version":"3.1.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":5.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56201","cwe":"CWE-150","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-56201","date":"2026-10-27","epss":0.00307,"percentile":0.2337}],"risk":0.18573499999999998,"urls":["https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699","https://github.com/pallets/jinja/releases/tag/3.1.5","https://nvd.nist.gov/vuln/detail/CVE-2024-56201","https://github.com/pallets/jinja/issues/1792","https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gmj6-6f8f-6699","description":"Jinja has a sandbox breakout through malicious filenames"},"relatedVulnerabilities":[{"id":"CVE-2024-56201","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":6.1,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56201","cwe":"CWE-150","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-56201","date":"2026-10-27","epss":0.00307,"percentile":0.2337}],"urls":["https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f","https://github.com/pallets/jinja/issues/1792","https://github.com/pallets/jinja/releases/tag/3.1.5","https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-56201","description":"Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox is used. To exploit the vulnerability, an attacker needs to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates where the template author can also choose the template filename. This vulnerability is fixed in 3.1.5."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5928","versionConstraint":"< 2.35-0ubuntu3.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-5928","fix":{"state":"fixed","versions":["2.35-0ubuntu3.14"],"available":[{"date":"2026-07-27","kind":"advisory","version":"2.35-0ubuntu3.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-5928","cwe":"CWE-127","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-5928","date":"2026-10-27","epss":0.00369,"percentile":0.30617}],"risk":0.1845,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5928"},"relatedVulnerabilities":[{"id":"CVE-2026-5928","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5928","cwe":"CWE-127","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-5928","date":"2026-10-27","epss":0.00369,"percentile":0.30617}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33998","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5928","description":"Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.\n\nA bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5928","versionConstraint":"< 2.35-0ubuntu3.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-5928","fix":{"state":"fixed","versions":["2.35-0ubuntu3.14"],"available":[{"date":"2026-07-27","kind":"advisory","version":"2.35-0ubuntu3.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-5928","cwe":"CWE-127","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-5928","date":"2026-10-27","epss":0.00369,"percentile":0.30617}],"risk":0.1845,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5928"},"relatedVulnerabilities":[{"id":"CVE-2026-5928","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5928","cwe":"CWE-127","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-5928","date":"2026-10-27","epss":0.00369,"percentile":0.30617}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33998","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5928","description":"Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.\n\nA bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets."}]},{"artifact":{"id":"b2cb24939021bec5","cpes":["cpe:2.3:a:locales:locales:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.35-0ubuntu3.4?arch=all&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5928","versionConstraint":"< 2.35-0ubuntu3.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-5928","fix":{"state":"fixed","versions":["2.35-0ubuntu3.14"],"available":[{"date":"2026-07-27","kind":"advisory","version":"2.35-0ubuntu3.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-5928","cwe":"CWE-127","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-5928","date":"2026-10-27","epss":0.00369,"percentile":0.30617}],"risk":0.1845,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5928"},"relatedVulnerabilities":[{"id":"CVE-2026-5928","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5928","cwe":"CWE-127","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-5928","date":"2026-10-27","epss":0.00369,"percentile":0.30617}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33998","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5928","description":"Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.\n\nA bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp->_IO_read_ptr) instead of the actual wide-stream read pointer (fp->_wide_data->_IO_read_ptr). The program crash may happen in cases where fp->_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets."}]},{"artifact":{"id":"5390fed82fe316fb","cpes":["cpe:2.3:a:pandoc:pandoc:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"pandoc","purl":"pkg:deb/ubuntu/pandoc@2.9.2.1-3ubuntu2?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"2.9.2.1-3ubuntu2","language":"","licenses":["BSD-3-Clause~Glasgow","BSD-3-clause~JohnMacFarlane","CC-BY-SA-3.0","GPL-2","GPL-2+","GPL-3","GPL-3+","ISC","MS-RL","WTFPL-2","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/pandoc/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/pandoc/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/pandoc.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/pandoc.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/pandoc.list","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/pandoc.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-35936","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pandoc","version":"2.9.2.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-35936","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-35936","cwe":"CWE-20","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-35936","date":"2026-10-27","epss":0.00368,"percentile":0.30526}],"risk":0.184,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-35936"},"relatedVulnerabilities":[{"id":"CVE-2023-35936","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L","metrics":{"baseScore":5,"impactScore":4.3,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:L","metrics":{"baseScore":6.1,"impactScore":4.8,"exploitabilityScore":0.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-35936","cwe":"CWE-20","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-35936","date":"2026-10-27","epss":0.00368,"percentile":0.30526}],"urls":["https://github.com/jgm/pandoc/security/advisories/GHSA-xj5q-fv23-575g","https://lists.debian.org/debian-lts-announce/2023/07/msg00029.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JGRJHU2FTSGTHHRTNDF7STEKLKKA25JN/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYP3FKDS3KAYMQUZVVL73IUI4CWSKLKP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QI6RBP6ZKVC2OOCV6SU2FUHPMAXDDJFU/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-35936","description":"Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version 1.13 and prior to version 3.1.4, Pandoc is susceptible to an arbitrary file write vulnerability, which can be triggered by providing a specially crafted image element in the input when generating files using the `--extract-media` option or outputting to PDF format. This vulnerability allows an attacker to create or overwrite arbitrary files on the system ,depending on the privileges of the process running pandoc. It only affects systems that pass untrusted user input to pandoc and allow pandoc to be used to produce a PDF or with the `--extract-media` option.\n\nThe fix is to unescape the percent-encoding prior to checking that the resource is not above the working directory, and prior to extracting the extension.  Some code for checking that the path is below the working directory was flawed in a similar way and has also been fixed. Note that the `--sandbox` option, which only affects IO done by readers and writers themselves, does not block this vulnerability. The vulnerability is patched in pandoc 3.1.4. As a workaround, audit the pandoc command and disallow PDF output and the `--extract-media` option."}]},{"artifact":{"id":"01e7c7b777eb5e07","cpes":["cpe:2.3:a:pandoc-data:pandoc-data:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:pandoc-data:pandoc_data:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:pandoc_data:pandoc-data:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:pandoc_data:pandoc_data:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:pandoc:pandoc-data:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:pandoc:pandoc_data:2.9.2.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"pandoc-data","purl":"pkg:deb/ubuntu/pandoc-data@2.9.2.1-3ubuntu2?arch=all&distro=ubuntu-22.04&upstream=pandoc","type":"deb","version":"2.9.2.1-3ubuntu2","language":"","licenses":["BSD-3-Clause~Glasgow","BSD-3-clause~JohnMacFarlane","CC-BY-SA-3.0","GPL-2","GPL-2+","GPL-3","GPL-3+","ISC","MS-RL","WTFPL-2","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/pandoc-data/copyright","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/usr/share/doc/pandoc-data/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/pandoc-data.md5sums","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/pandoc-data.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/pandoc-data.list","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/info/pandoc-data.list"}],"upstreams":[{"name":"pandoc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-35936","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"pandoc","version":"2.9.2.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2023-35936","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-35936","cwe":"CWE-20","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-35936","date":"2026-10-27","epss":0.00368,"percentile":0.30526}],"risk":0.184,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-35936"},"relatedVulnerabilities":[{"id":"CVE-2023-35936","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L","metrics":{"baseScore":5,"impactScore":4.3,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:L","metrics":{"baseScore":6.1,"impactScore":4.8,"exploitabilityScore":0.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-35936","cwe":"CWE-20","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-35936","date":"2026-10-27","epss":0.00368,"percentile":0.30526}],"urls":["https://github.com/jgm/pandoc/security/advisories/GHSA-xj5q-fv23-575g","https://lists.debian.org/debian-lts-announce/2023/07/msg00029.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JGRJHU2FTSGTHHRTNDF7STEKLKKA25JN/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYP3FKDS3KAYMQUZVVL73IUI4CWSKLKP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QI6RBP6ZKVC2OOCV6SU2FUHPMAXDDJFU/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-35936","description":"Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. Starting in version 1.13 and prior to version 3.1.4, Pandoc is susceptible to an arbitrary file write vulnerability, which can be triggered by providing a specially crafted image element in the input when generating files using the `--extract-media` option or outputting to PDF format. This vulnerability allows an attacker to create or overwrite arbitrary files on the system ,depending on the privileges of the process running pandoc. It only affects systems that pass untrusted user input to pandoc and allow pandoc to be used to produce a PDF or with the `--extract-media` option.\n\nThe fix is to unescape the percent-encoding prior to checking that the resource is not above the working directory, and prior to extracting the extension.  Some code for checking that the path is below the working directory was flawed in a similar way and has also been fixed. Note that the `--sandbox` option, which only affects IO done by readers and writers themselves, does not block this vulnerability. The vulnerability is patched in pandoc 3.1.4. As a workaround, audit the pandoc command and disallow PDF output and the `--extract-media` option."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.19"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-13176","versionConstraint":"< 3.0.2-0ubuntu1.19 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-13176","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.19"],"available":[{"date":"2025-02-20","kind":"advisory","version":"3.0.2-0ubuntu1.19"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-13176","cwe":"CWE-385","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-13176","date":"2026-10-27","epss":0.00609,"percentile":0.48928}],"risk":0.18269999999999997,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-13176"},"relatedVulnerabilities":[{"id":"CVE-2024-13176","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.1,"impactScore":3.4,"exploitabilityScore":0.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-13176","cwe":"CWE-385","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-13176","date":"2026-10-27","epss":0.00609,"percentile":0.48928}],"urls":["https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844","https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467","https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902","https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65","https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f","https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded","https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86","https://openssl-library.org/news/secadv/20250120.txt","http://www.openwall.com/lists/oss-security/2025/01/20/2","https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html","https://security.netapp.com/advisory/ntap-20250124-0005/","https://security.netapp.com/advisory/ntap-20250418-0010/","https://security.netapp.com/advisory/ntap-20250502-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-13176","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.19"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-13176","versionConstraint":"< 3.0.2-0ubuntu1.19 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2024-13176","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.19"],"available":[{"date":"2025-02-20","kind":"advisory","version":"3.0.2-0ubuntu1.19"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-13176","cwe":"CWE-385","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-13176","date":"2026-10-27","epss":0.00609,"percentile":0.48928}],"risk":0.18269999999999997,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-13176"},"relatedVulnerabilities":[{"id":"CVE-2024-13176","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.1,"impactScore":3.4,"exploitabilityScore":0.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-13176","cwe":"CWE-385","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-13176","date":"2026-10-27","epss":0.00609,"percentile":0.48928}],"urls":["https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844","https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467","https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902","https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65","https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f","https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded","https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86","https://openssl-library.org/news/secadv/20250120.txt","http://www.openwall.com/lists/oss-security/2025/01/20/2","https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html","https://security.netapp.com/advisory/ntap-20250124-0005/","https://security.netapp.com/advisory/ntap-20250418-0010/","https://security.netapp.com/advisory/ntap-20250502-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-13176","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue."}]},{"artifact":{"id":"4bd0adec6e7440e1","cpes":["cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:node.js:*:*","cpe:2.3:a:tar_project:tar:6.1.15:*:*:*:*:rust:*:*","cpe:2.3:a:isaacs:tar:6.1.15:*:*:*:*:node.js:*:*"],"name":"tar","purl":"pkg:npm/tar@6.1.15","type":"npm","version":"6.1.15","language":"javascript","licenses":["ISC"],"locations":[{"path":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","layerID":"sha256:889f93f0e367bc5c6f300998a03a089dda1aa5b76a53d554f76a73ab98cd2be5","accessPath":"/opt/conda/lib/node_modules/npm/node_modules/tar/package.json","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.5.17"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gvwx-54wh-qm9j","versionConstraint":"<=7.5.16 (semantic)"},"matcher":"javascript-matcher","searchedBy":{"package":{"name":"tar","version":"6.1.15"},"language":"javascript","namespace":"github:language:javascript"}}],"vulnerability":{"id":"GHSA-gvwx-54wh-qm9j","fix":{"state":"fixed","versions":["7.5.17"],"available":[{"date":"2026-07-21","kind":"first-observed","version":"7.5.17"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59875","cwe":"CWE-248","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59875","date":"2026-10-27","epss":0.00354,"percentile":0.28952}],"risk":0.18231000000000003,"urls":["https://github.com/isaacs/node-tar/security/advisories/GHSA-gvwx-54wh-qm9j","https://nvd.nist.gov/vuln/detail/CVE-2026-59875","https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3","https://github.com/isaacs/node-tar/releases/tag/v7.5.17"],"severity":"Medium","namespace":"github:language:javascript","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gvwx-54wh-qm9j","description":"node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records"},"relatedVulnerabilities":[{"id":"CVE-2026-59875","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59875","cwe":"CWE-248","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59875","date":"2026-10-27","epss":0.00354,"percentile":0.28952}],"urls":["https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3","https://github.com/isaacs/node-tar/releases/tag/v7.5.17","https://github.com/isaacs/node-tar/security/advisories/GHSA-gvwx-54wh-qm9j"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59875","description":"node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.17, node-tar does not strip NUL bytes from PAX path and linkpath records in src/pax.ts, allowing a crafted archive with values to reach fs.lstat or fs.open and terminate the process with an uncaught exception. This issue is fixed in version 7.5.17."}]},{"artifact":{"id":"c6aaaa0cebede174","cpes":["cpe:2.3:a:libssl3:libssl3:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:deb/ubuntu/libssl3@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04&upstream=openssl","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libssl3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl3:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libssl3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.21"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-69419","versionConstraint":"< 3.0.2-0ubuntu1.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-69419","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.21"],"available":[{"date":"2026-01-27","kind":"advisory","version":"3.0.2-0ubuntu1.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-69419","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69419","date":"2026-10-27","epss":0.00607,"percentile":0.48835}],"risk":0.18209999999999998,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-69419"},"relatedVulnerabilities":[{"id":"CVE-2025-69419","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69419","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69419","date":"2026-10-27","epss":0.00607,"percentile":0.48835}],"urls":["https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296","https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb","https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2","https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015","https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69419","description":"Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."}]},{"artifact":{"id":"4c882b09efefbd1a","cpes":["cpe:2.3:a:openssl:openssl:3.0.2-0ubuntu1.10:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=amd64&distro=ubuntu-22.04","type":"deb","version":"3.0.2-0ubuntu1.10","language":"","licenses":["Apache-2.0","Artistic","GPL-1","GPL-1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl3/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:9e19e4556c44124f879c781d8b6d4f64718ca876707b58a02970ddcb4d36633c","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.0.2-0ubuntu1.21"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-69419","versionConstraint":"< 3.0.2-0ubuntu1.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"openssl","version":"3.0.2-0ubuntu1.10"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2025-69419","fix":{"state":"fixed","versions":["3.0.2-0ubuntu1.21"],"available":[{"date":"2026-01-27","kind":"advisory","version":"3.0.2-0ubuntu1.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-69419","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69419","date":"2026-10-27","epss":0.00607,"percentile":0.48835}],"risk":0.18209999999999998,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-69419"},"relatedVulnerabilities":[{"id":"CVE-2025-69419","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69419","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69419","date":"2026-10-27","epss":0.00607,"percentile":0.48835}],"urls":["https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296","https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb","https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2","https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015","https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69419","description":"Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."}]},{"artifact":{"id":"87c906b2b15d57d1","cpes":["cpe:2.3:a:python:requests:2.31.0:*:*:*:*:*:*:*"],"name":"requests","purl":"pkg:pypi/requests@2.31.0","type":"python","version":"2.31.0","language":"python","licenses":["Apache 2.0"],"locations":[{"path":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/METADATA","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/METADATA","annotations":{"evidence":"primary"}},{"path":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/RECORD","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/RECORD","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/direct_url.json","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/direct_url.json","annotations":{"evidence":"supporting"}},{"path":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/top_level.txt","layerID":"sha256:079f33e41632552e215e886818fe99aa7f7f83cbe89781282ccca99e3b0a9308","accessPath":"/opt/conda/lib/python3.11/site-packages/requests-2.31.0.dist-info/top_level.txt","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.32.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9wx4-h78v-vm56","versionConstraint":"<2.32.0 (python)"},"matcher":"python-matcher","searchedBy":{"package":{"name":"requests","version":"2.31.0"},"language":"python","namespace":"github:language:python"}}],"vulnerability":{"id":"GHSA-9wx4-h78v-vm56","fix":{"state":"fixed","versions":["2.32.0"],"available":[{"date":"2024-05-21","kind":"first-observed","version":"2.32.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":5.6,"impactScore":5.2,"exploitabilityScore":0.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-35195","cwe":"CWE-670","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-35195","date":"2026-10-27","epss":0.0034,"percentile":0.27311}],"risk":0.1802,"urls":["https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56","https://github.com/psf/requests/pull/6655","https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac","https://nvd.nist.gov/vuln/detail/CVE-2024-35195","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ"],"severity":"Medium","namespace":"github:language:python","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9wx4-h78v-vm56","description":"Requests `Session` object does not verify requests after making first request with verify=False"},"relatedVulnerabilities":[{"id":"CVE-2024-35195","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":5.6,"impactScore":5.2,"exploitabilityScore":0.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-35195","cwe":"CWE-670","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-35195","date":"2026-10-27","epss":0.0034,"percentile":0.27311}],"urls":["https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac","https://github.com/psf/requests/pull/6655","https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-35195","description":"Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.15"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-77117","versionConstraint":"< 2.35-0ubuntu3.15 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-77117","fix":{"state":"fixed","versions":["2.35-0ubuntu3.15"],"available":[{"date":"2026-09-08","kind":"advisory","version":"2.35-0ubuntu3.15"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-77117","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-77117","date":"2026-10-27","epss":0.00358,"percentile":0.29398}],"risk":0.179,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-77117"},"relatedVulnerabilities":[{"id":"CVE-2026-77117","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77117","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-77117","date":"2026-10-27","epss":0.00358,"percentile":0.29398}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34556","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0019"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77117","description":"Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.\n\nSome SHIFT_JISX0213 sequences decode to two code points.  If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call.  The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only the SHIFT_JISX0213 character set is affected, which is not commonly used.  The related defect in the EUC_JISX0213 converter is tracked separately as CVE-2026-80489."}]},{"artifact":{"id":"54fa43fd413b2229","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.15"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-80489","versionConstraint":"< 2.35-0ubuntu3.15 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-80489","fix":{"state":"fixed","versions":["2.35-0ubuntu3.15"],"available":[{"date":"2026-09-08","kind":"advisory","version":"2.35-0ubuntu3.15"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-80489","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-80489","date":"2026-10-27","epss":0.00358,"percentile":0.29398}],"risk":0.179,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-80489"},"relatedVulnerabilities":[{"id":"CVE-2026-80489","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80489","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-80489","date":"2026-10-27","epss":0.00358,"percentile":0.29398}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34568","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0020"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-80489","description":"Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.\n\nSome EUC_JISX0213 sequences decode to two code points.  If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call.  The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only the EUC_JISX0213 character set is affected, which is not commonly used.  The related defect in SHIFT_JISX0213 converter is tracked separately as CVE-2026-77117."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.15"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-77117","versionConstraint":"< 2.35-0ubuntu3.15 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-77117","fix":{"state":"fixed","versions":["2.35-0ubuntu3.15"],"available":[{"date":"2026-09-08","kind":"advisory","version":"2.35-0ubuntu3.15"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-77117","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-77117","date":"2026-10-27","epss":0.00358,"percentile":0.29398}],"risk":0.179,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-77117"},"relatedVulnerabilities":[{"id":"CVE-2026-77117","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77117","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-77117","date":"2026-10-27","epss":0.00358,"percentile":0.29398}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34556","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0019"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77117","description":"Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.\n\nSome SHIFT_JISX0213 sequences decode to two code points.  If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call.  The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only the SHIFT_JISX0213 character set is affected, which is not commonly used.  The related defect in the EUC_JISX0213 converter is tracked separately as CVE-2026-80489."}]},{"artifact":{"id":"82f63fcafb3908dc","cpes":["cpe:2.3:a:libc6:libc6:2.35-0ubuntu3.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.35-0ubuntu3.4?arch=amd64&distro=ubuntu-22.04&upstream=glibc","type":"deb","version":"2.35-0ubuntu3.4","language":"","licenses":["sha256:d3c95b56fa33e28b57860580f0baf4e4f4de2a268a2b80f1d031a5191bade265"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4113305ae79c0dedec32f452d7bb1e17c2d6329a97dff850d533ab64b8a46e9b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:256d88da41857db513b95b50ba9a9b28491b58c954e25477d5dad8abb465430b","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.35-0ubuntu3.15"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-80489","versionConstraint":"< 2.35-0ubuntu3.15 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"22.04"},"package":{"name":"glibc","version":"2.35-0ubuntu3.4"},"namespace":"ubuntu:distro:ubuntu:22.04"}}],"vulnerability":{"id":"CVE-2026-80489","fix":{"state":"fixed","versions":["2.35-0ubuntu3.15"],"available":[{"date":"2026-09-08","kind":"advisory","version":"2.35-0ubuntu3.15"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-80489","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-80489","date":"2026-10-27","epss":0.00358,"percentile":0.29398}],"risk":0.179,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:22.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-80489"},"relatedVulnerabilities":[{"id":"CVE-2026-80489","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80489","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-80489","date":"2026-10-27","epss":0.00358,"percentile":0.29398}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34568","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0020"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-80489","description":"Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.\n\nSome EUC_JISX0213 sequences decode to two code points.  If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call.  The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only the EUC_JISX0213 character set is affected, which is not commonly used.  The related defect in SHIFT_JISX0213 converter is tracked separately as CVE-2026-77117."}]}],"grade":"F","score":"0.00","as_of":"2026-10-29T03:04:01.885Z","grype_db_version":"2026-10-28T06:23:30.000Z"}