{"grype_matches":[{"artifact":{"id":"3a31f44df9c63a52","cpes":["cpe:2.3:a:andybalholm:brotli:v1.2.2:*:*:*:*:*:*:*"],"name":"github.com/andybalholm/brotli","purl":"pkg:golang/github.com/andybalholm/brotli@v1.2.2","type":"go-module","version":"v1.2.2","language":"go","licenses":[],"metadata":{"h1Digest":"h1:HzTuoo2ErYQqf5qvcJInB8uvqSVxRttzkFexPWtnceM=","mainModule":"github.com/rclone/rclone","architecture":"amd64","goCompiledVersion":"go1.27.2"},"locations":[{"path":"/usr/local/bin/rclone","layerID":"sha256:3ed598c74c07812030a840a2539a9482d9349f27ad19f7eaa640cf48328499d6","accessPath":"/usr/local/bin/rclone","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.2.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6888","versionConstraint":"<1.2.7 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"github.com/andybalholm/brotli","version":"v1.2.2"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6888","fix":{"state":"fixed","versions":["1.2.7"],"available":[{"date":"2026-10-23","kind":"release","version":"1.2.7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111497","cwe":"CWE-252","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2026-111497","cwe":"CWE-787","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2026-111497","date":"2026-11-09","epss":0.82641,"percentile":0.99669}],"risk":98.70000000000002,"urls":["https://github.com/andybalholm/brotli/commit/33c2a9884269798192b5ecf171288f98939dbe42","https://github.com/andybalholm/brotli/releases/tag/v1.2.7","https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://github.com/andybalholm/brotli/security/advisories/GHSA-c9gr-gmg4-2vqv","description":"In github.com/andybalholm/brotli before v1.2.7, the decompressor allocates memory for Huffman tables and block-type trees on every meta-block header without bounding the cumulative allocations relative to the input size. A small crafted brotli stream containing many empty meta-blocks with new Huffman trees can trigger hundreds of megabytes of allocations per kilobyte of input, leading to denial of service.","knownExploited":[{"cve":"CVE-2026-111497","cwes":["CWE-252","CWE-787"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-111497"],"notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","dueDate":"2026-11-10","product":"Brotli","dateAdded":"2026-10-27","vendorProject":"Google","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2026-111497","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111497","cwe":"CWE-252","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2026-111497","cwe":"CWE-787","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2026-111497","date":"2026-11-09","epss":0.82641,"percentile":0.99669}],"urls":["https://github.com/andybalholm/brotli/releases/tag/v1.2.7","https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high","http://www.openwall.com/lists/oss-security/2026/10/23/25","http://www.openwall.com/lists/oss-security/2026/10/24/6","http://www.openwall.com/lists/oss-security/2026/10/26/12","http://www.openwall.com/lists/oss-security/2026/10/26/13","http://www.openwall.com/lists/oss-security/2026/10/26/16","http://www.openwall.com/lists/oss-security/2026/11/03/2","https://broccoli2shell.com","https://github.com/advisories/GHSA-9v8h-qqgm-4m35","https://github.com/dotnet/announcements/issues/494","https://github.com/google/brotli/releases/tag/v1.0.10","https://github.com/google/brotli/releases/tag/v1.1.1","https://github.com/google/brotli/releases/tag/v1.2.1","https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html","https://patchtheplanet.org/brotli","https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497","https://cert-portal.siemens.com/productcert/html/ssa-045512.html","https://cert-portal.siemens.com/productcert/html/ssa-443410.html","https://cert-portal.siemens.com/productcert/html/ssa-898633.html","https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-111497","description":"A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.","knownExploited":[{"cve":"CVE-2026-111497","cwes":["CWE-252","CWE-787"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-111497"],"notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","dueDate":"2026-11-10","product":"Brotli","dateAdded":"2026-10-27","vendorProject":"Google","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"unknown"}]},{"id":"GHSA-c9gr-gmg4-2vqv","cvss":[],"urls":[],"severity":"Unknown","namespace":"github:language:go","dataSource":"github"}]},{"artifact":{"id":"504ef2bce88b9f7c","cpes":["cpe:2.3:a:x11vnc:x11vnc:0.9.17-2:*:*:*:*:*:*:*"],"name":"x11vnc","purl":"pkg:deb/ubuntu/x11vnc@0.9.17-2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"0.9.17-2","language":"","licenses":["GPL-2","GPL-2.0+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/x11vnc/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/x11vnc/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/x11vnc.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/x11vnc.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/x11vnc.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/x11vnc.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-32854","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"x11vnc","version":"0.9.17-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-32854","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-32854","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-32854","date":"2026-11-09","epss":0.05415,"percentile":0.92753}],"risk":2.7075,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-32854"},"relatedVulnerabilities":[{"id":"CVE-2026-32854","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-32854","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-32854","date":"2026-11-09","epss":0.05415,"percentile":0.92753}],"urls":["https://github.com/LibVNC/libvncserver/commit/dc78dee51a7e270e537a541a17befdf2073f5314","https://github.com/LibVNC/libvncserver/security/advisories/GHSA-xjp8-4qqv-5x4x","https://www.vulncheck.com/advisories/libvncserver-httpd-proxy-null-pointer-dereference"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-32854","description":"LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c that allow remote attackers to cause a denial of service by sending specially crafted HTTP requests. Attackers can exploit missing validation of strchr() return values in the CONNECT and GET proxy handling paths to trigger null pointer dereferences and crash the server when httpd and proxy features are enabled."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2014-5271","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2014-5271","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2014-5271","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-5271","date":"2026-11-09","epss":0.04697,"percentile":0.91865}],"risk":2.3485,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2014-5271"},"relatedVulnerabilities":[{"id":"CVE-2014-5271","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2014-5271","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-5271","date":"2026-11-09","epss":0.04697,"percentile":0.91865}],"urls":["http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=52b81ff4635c077b2bc8b8d3637d933b6629d803","http://www.osvdb.org/111725","http://www.securityfocus.com/bid/69250","https://security.gentoo.org/glsa/201603-06","https://www.ffmpeg.org/security.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2014-5271","description":"Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2014-5271","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2014-5271","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2014-5271","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-5271","date":"2026-11-09","epss":0.04697,"percentile":0.91865}],"risk":2.3485,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2014-5271"},"relatedVulnerabilities":[{"id":"CVE-2014-5271","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2014-5271","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-5271","date":"2026-11-09","epss":0.04697,"percentile":0.91865}],"urls":["http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=52b81ff4635c077b2bc8b8d3637d933b6629d803","http://www.osvdb.org/111725","http://www.securityfocus.com/bid/69250","https://security.gentoo.org/glsa/201603-06","https://www.ffmpeg.org/security.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2014-5271","description":"Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2014-5271","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2014-5271","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2014-5271","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-5271","date":"2026-11-09","epss":0.04697,"percentile":0.91865}],"risk":2.3485,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2014-5271"},"relatedVulnerabilities":[{"id":"CVE-2014-5271","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2014-5271","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-5271","date":"2026-11-09","epss":0.04697,"percentile":0.91865}],"urls":["http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=52b81ff4635c077b2bc8b8d3637d933b6629d803","http://www.osvdb.org/111725","http://www.securityfocus.com/bid/69250","https://security.gentoo.org/glsa/201603-06","https://www.ffmpeg.org/security.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2014-5271","description":"Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav before 10.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors."}]},{"artifact":{"id":"60af6de63c33b882","cpes":["cpe:2.3:a:python3-pip-whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*"],"name":"python3-pip-whl","purl":"pkg:deb/ubuntu/python3-pip-whl@25.1.1%2Bdfsg-1ubuntu2?arch=all&distro=ubuntu-26.04&upstream=python-pip","type":"deb","version":"25.1.1+dfsg-1ubuntu2","language":"","licenses":["Apache-2.0","BSD-2","BSD-3","Expat","ISC","MPL-2","MPL-2.0","Python"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-pip-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-pip-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.list"}],"upstreams":[{"name":"python-pip"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-21441","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python-pip","version":"25.1.1+dfsg-1ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-21441","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-21441","cwe":"CWE-409","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-21441","cwe":"CWE-409","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-21441","date":"2026-11-09","epss":0.02922,"percentile":0.87139}],"risk":1.461,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-21441"},"relatedVulnerabilities":[{"id":"CVE-2026-21441","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-21441","cwe":"CWE-409","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-21441","cwe":"CWE-409","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-21441","date":"2026-11-09","epss":0.02922,"percentile":0.87139}],"urls":["https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b","https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99","https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html","https://access.redhat.com/errata/RHSA-2026:0981","https://access.redhat.com/errata/RHSA-2026:0990","https://access.redhat.com/errata/RHSA-2026:10184","https://access.redhat.com/errata/RHSA-2026:1038","https://access.redhat.com/errata/RHSA-2026:1041","https://access.redhat.com/errata/RHSA-2026:1042","https://access.redhat.com/errata/RHSA-2026:1086","https://access.redhat.com/errata/RHSA-2026:1087","https://access.redhat.com/errata/RHSA-2026:1088","https://access.redhat.com/errata/RHSA-2026:1089","https://access.redhat.com/errata/RHSA-2026:1166","https://access.redhat.com/errata/RHSA-2026:1168","https://access.redhat.com/errata/RHSA-2026:1176","https://access.redhat.com/errata/RHSA-2026:1224","https://access.redhat.com/errata/RHSA-2026:1226","https://access.redhat.com/errata/RHSA-2026:1239","https://access.redhat.com/errata/RHSA-2026:1240","https://access.redhat.com/errata/RHSA-2026:1241","https://access.redhat.com/errata/RHSA-2026:1254","https://access.redhat.com/errata/RHSA-2026:1485","https://access.redhat.com/errata/RHSA-2026:14877","https://access.redhat.com/errata/RHSA-2026:1504","https://access.redhat.com/errata/RHSA-2026:1546","https://access.redhat.com/errata/RHSA-2026:1596","https://access.redhat.com/errata/RHSA-2026:1599","https://access.redhat.com/errata/RHSA-2026:1609","https://access.redhat.com/errata/RHSA-2026:1618","https://access.redhat.com/errata/RHSA-2026:1619","https://access.redhat.com/errata/RHSA-2026:1652","https://access.redhat.com/errata/RHSA-2026:1674","https://access.redhat.com/errata/RHSA-2026:1676","https://access.redhat.com/errata/RHSA-2026:1693","https://access.redhat.com/errata/RHSA-2026:1704","https://access.redhat.com/errata/RHSA-2026:1706","https://access.redhat.com/errata/RHSA-2026:1712","https://access.redhat.com/errata/RHSA-2026:1717","https://access.redhat.com/errata/RHSA-2026:1726","https://access.redhat.com/errata/RHSA-2026:1729","https://access.redhat.com/errata/RHSA-2026:1730","https://access.redhat.com/errata/RHSA-2026:1734","https://access.redhat.com/errata/RHSA-2026:1735","https://access.redhat.com/errata/RHSA-2026:1736","https://access.redhat.com/errata/RHSA-2026:17456","https://access.redhat.com/errata/RHSA-2026:17457","https://access.redhat.com/errata/RHSA-2026:17460","https://access.redhat.com/errata/RHSA-2026:17461","https://access.redhat.com/errata/RHSA-2026:17462","https://access.redhat.com/errata/RHSA-2026:17463","https://access.redhat.com/errata/RHSA-2026:1791","https://access.redhat.com/errata/RHSA-2026:1792","https://access.redhat.com/errata/RHSA-2026:1793","https://access.redhat.com/errata/RHSA-2026:1794","https://access.redhat.com/errata/RHSA-2026:1803","https://access.redhat.com/errata/RHSA-2026:1805","https://access.redhat.com/errata/RHSA-2026:1942","https://access.redhat.com/errata/RHSA-2026:1957","https://access.redhat.com/errata/RHSA-2026:19712","https://access.redhat.com/errata/RHSA-2026:2106","https://access.redhat.com/errata/RHSA-2026:2126","https://access.redhat.com/errata/RHSA-2026:2137","https://access.redhat.com/errata/RHSA-2026:2139","https://access.redhat.com/errata/RHSA-2026:2144","https://access.redhat.com/errata/RHSA-2026:2256","https://access.redhat.com/errata/RHSA-2026:2456","https://access.redhat.com/errata/RHSA-2026:2500","https://access.redhat.com/errata/RHSA-2026:25127","https://access.redhat.com/errata/RHSA-2026:2563","https://access.redhat.com/errata/RHSA-2026:2681","https://access.redhat.com/errata/RHSA-2026:2695","https://access.redhat.com/errata/RHSA-2026:2717","https://access.redhat.com/errata/RHSA-2026:2718","https://access.redhat.com/errata/RHSA-2026:2723","https://access.redhat.com/errata/RHSA-2026:2728","https://access.redhat.com/errata/RHSA-2026:2760","https://access.redhat.com/errata/RHSA-2026:2762","https://access.redhat.com/errata/RHSA-2026:2764","https://access.redhat.com/errata/RHSA-2026:2765","https://access.redhat.com/errata/RHSA-2026:28043","https://access.redhat.com/errata/RHSA-2026:28441","https://access.redhat.com/errata/RHSA-2026:2900","https://access.redhat.com/errata/RHSA-2026:2911","https://access.redhat.com/errata/RHSA-2026:2919","https://access.redhat.com/errata/RHSA-2026:2924","https://access.redhat.com/errata/RHSA-2026:2925","https://access.redhat.com/errata/RHSA-2026:2926","https://access.redhat.com/errata/RHSA-2026:3296","https://access.redhat.com/errata/RHSA-2026:33154","https://access.redhat.com/errata/RHSA-2026:3406","https://access.redhat.com/errata/RHSA-2026:3444","https://access.redhat.com/errata/RHSA-2026:3461","https://access.redhat.com/errata/RHSA-2026:3462","https://access.redhat.com/errata/RHSA-2026:3713","https://access.redhat.com/errata/RHSA-2026:3782","https://access.redhat.com/errata/RHSA-2026:3869","https://access.redhat.com/errata/RHSA-2026:3874","https://access.redhat.com/errata/RHSA-2026:3884","https://access.redhat.com/errata/RHSA-2026:3960","https://access.redhat.com/errata/RHSA-2026:4185","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:4215","https://access.redhat.com/errata/RHSA-2026:4271","https://access.redhat.com/errata/RHSA-2026:4466","https://access.redhat.com/errata/RHSA-2026:4467","https://access.redhat.com/errata/RHSA-2026:44696","https://access.redhat.com/errata/RHSA-2026:51357","https://access.redhat.com/errata/RHSA-2026:5459","https://access.redhat.com/errata/RHSA-2026:61628","https://access.redhat.com/errata/RHSA-2026:6287","https://access.redhat.com/errata/RHSA-2026:6292","https://access.redhat.com/errata/RHSA-2026:8151","https://access.redhat.com/errata/RHSA-2026:8500","https://access.redhat.com/errata/RHSA-2026:8501","https://access.redhat.com/security/cve/CVE-2026-21441","https://bugzilla.redhat.com/show_bug.cgi?id=2427726","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-21441","description":"urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source."}]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-92392","versionConstraint":">= 8.12.0, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-92392","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-20","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-20","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-20","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-20","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92392","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92392","date":"2026-11-09","epss":0.01284,"percentile":0.70318}],"risk":1.00152,"urls":["https://curl.se/docs/CVE-2026-92392.html","https://curl.se/docs/CVE-2026-92392.json","https://hackerone.com/reports/4030333","http://www.openwall.com/lists/oss-security/2026/10/18/5","http://www.openwall.com/lists/oss-security/2026/10/18/6"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92392","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after\nfree of a `struct Curl_easy` object."},"relatedVulnerabilities":[]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-92391","versionConstraint":">= 7.56.0, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-92391","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92391","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92391","date":"2026-11-09","epss":0.01166,"percentile":0.6754}],"risk":0.8744999999999999,"urls":["https://curl.se/docs/CVE-2026-92391.html","https://curl.se/docs/CVE-2026-92391.json","https://hackerone.com/reports/4024222"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92391","description":"A deeply nested multipart MIME structure constructed via the public API causes\na stack overflow in libcurl during normal cleanup operations. An excessive\nrecursion depth within `curl_mime_free` leads to unbounded stack frame\nallocation during structure traversal, ultimately crashing the host process."},"relatedVulnerabilities":[]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-92387","versionConstraint":">= 8.10.0, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-92387","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92387","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92387","date":"2026-11-09","epss":0.01045,"percentile":0.64394}],"risk":0.8151,"urls":["https://curl.se/docs/CVE-2026-92387.html","https://curl.se/docs/CVE-2026-92387.json","https://hackerone.com/reports/4022003"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92387","description":"By permanently omitting the final control-response line, a malicious FTP,\nIMAP, POP3, or SMTP server can exploit libcurl and completely bypass its\nconfigured transfer timeout mechanism, indefinitely blocking all concurrent\ntransfers bound to the same multi-handle."},"relatedVulnerabilities":[]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8461","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-8461","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-8461","cwe":"CWE-787","type":"Secondary","source":"reefs@jfrog.com"},{"cve":"CVE-2026-8461","cwe":"CWE-787","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-8461","date":"2026-11-09","epss":0.01572,"percentile":0.75582}],"risk":0.786,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-8461"},"relatedVulnerabilities":[{"id":"CVE-2026-8461","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"reefs@jfrog.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8461","cwe":"CWE-787","type":"Secondary","source":"reefs@jfrog.com"},{"cve":"CVE-2026-8461","cwe":"CWE-787","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-8461","date":"2026-11-09","epss":0.01572,"percentile":0.75582}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23159","https://access.redhat.com/errata/RHSA-2026:43711","https://access.redhat.com/security/cve/CVE-2026-8461","https://bugzilla.redhat.com/show_bug.cgi?id=2490308","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8461.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8461","description":"An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution.\n\n This vulnerability is associated with the file libavcodec/magicyuv.C.\n\n\n\nThis issue affects FFmpeg before version 8.1.2."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8461","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-8461","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-8461","cwe":"CWE-787","type":"Secondary","source":"reefs@jfrog.com"},{"cve":"CVE-2026-8461","cwe":"CWE-787","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-8461","date":"2026-11-09","epss":0.01572,"percentile":0.75582}],"risk":0.786,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-8461"},"relatedVulnerabilities":[{"id":"CVE-2026-8461","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"reefs@jfrog.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8461","cwe":"CWE-787","type":"Secondary","source":"reefs@jfrog.com"},{"cve":"CVE-2026-8461","cwe":"CWE-787","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-8461","date":"2026-11-09","epss":0.01572,"percentile":0.75582}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23159","https://access.redhat.com/errata/RHSA-2026:43711","https://access.redhat.com/security/cve/CVE-2026-8461","https://bugzilla.redhat.com/show_bug.cgi?id=2490308","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8461.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8461","description":"An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution.\n\n This vulnerability is associated with the file libavcodec/magicyuv.C.\n\n\n\nThis issue affects FFmpeg before version 8.1.2."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8461","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-8461","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-8461","cwe":"CWE-787","type":"Secondary","source":"reefs@jfrog.com"},{"cve":"CVE-2026-8461","cwe":"CWE-787","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-8461","date":"2026-11-09","epss":0.01572,"percentile":0.75582}],"risk":0.786,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-8461"},"relatedVulnerabilities":[{"id":"CVE-2026-8461","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"reefs@jfrog.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8461","cwe":"CWE-787","type":"Secondary","source":"reefs@jfrog.com"},{"cve":"CVE-2026-8461","cwe":"CWE-787","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-8461","date":"2026-11-09","epss":0.01572,"percentile":0.75582}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23159","https://access.redhat.com/errata/RHSA-2026:43711","https://access.redhat.com/security/cve/CVE-2026-8461","https://bugzilla.redhat.com/show_bug.cgi?id=2490308","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8461.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8461","description":"An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution.\n\n This vulnerability is associated with the file libavcodec/magicyuv.C.\n\n\n\nThis issue affects FFmpeg before version 8.1.2."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6612","versionConstraint":">=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6612","fix":{"state":"fixed","versions":["1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-11-09","epss":0.00858,"percentile":0.5871}],"risk":0.7764900000000001,"urls":["https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847187","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."},"relatedVulnerabilities":[{"id":"CVE-2026-78663","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-11-09","epss":0.00858,"percentile":0.5871}],"urls":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78663","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."}]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6612","versionConstraint":">=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6612","fix":{"state":"fixed","versions":["1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-11-09","epss":0.00858,"percentile":0.5871}],"risk":0.7764900000000001,"urls":["https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847187","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."},"relatedVulnerabilities":[{"id":"CVE-2026-78663","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-11-09","epss":0.00858,"percentile":0.5871}],"urls":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78663","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."}]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87862","versionConstraint":">= 8.11.0, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87862","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87862","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87862","date":"2026-11-09","epss":0.00995,"percentile":0.62917}],"risk":0.7761,"urls":["https://curl.se/docs/CVE-2026-87862.html","https://curl.se/docs/CVE-2026-87862.json","https://hackerone.com/reports/3972357"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87862","description":"Importing a `includeSubDomains` parent HSTS entry before a longer-lived child\nentry, silently drops the child. Consequently, when the parent expires, the\nchild's valid HSTS policy is lost, causing curl to issue unencrypted HTTP\nrequests rather than upgrading to HTTPS."},"relatedVulnerabilities":[]},{"artifact":{"id":"2fd4888592a00e74","cpes":["cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-0:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_0:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"libsqlite3-0","purl":"pkg:deb/ubuntu/libsqlite3-0@3.46.1-9ubuntu0.3?arch=amd64&distro=ubuntu-26.04&upstream=sqlite3","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-0/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libsqlite3-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119586","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119586","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119586","cwe":"CWE-77","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119586","date":"2026-11-09","epss":0.01545,"percentile":0.75166}],"risk":0.7725,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119586"},"relatedVulnerabilities":[{"id":"CVE-2026-119586","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119586","cwe":"CWE-77","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119586","date":"2026-11-09","epss":0.01545,"percentile":0.75166}],"urls":["https://abraxaslabs.tech/research/sqlite-cli-recover","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.54.1/ext/recover/sqlite3recover.c#L1221-L1223","https://github.com/sqlite/sqlite/blob/version-3.54.1/src/shell.c.in#L7877-L7891","https://www.vulncheck.com/advisories/sqlite-cli-through-3.54.1-command-injection-via-recover-output"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119586","description":"SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqlite_schema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .system line, executing OS commands when victims pipe .recover output into sqlite3."}]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-94265","versionConstraint":">= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-94265","fix":{"state":"fixed","versions":["8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94265","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94265","date":"2026-11-09","epss":0.00776,"percentile":0.56059}],"risk":0.7022800000000001,"urls":["https://curl.se/docs/CVE-2026-94265.html","https://curl.se/docs/CVE-2026-94265.json","https://hackerone.com/reports/4040551"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94265","description":"When processing an HTTP redirect to a URL containing userinfo (a\n`username:password` component), curl might erroneously retain and re-transmit\nthe original host's HTTP Negotiate authentication state. Consequently, a\nmalicious server can trigger a redirect containing arbitrary userinfo to force\ncurl to send a freshly minted Kerberos ticket—generated using the ambient\nidentity of the client process to an untrusted third-party host, effectively\nbypassing the domain-scoping restrictions normally enforced by the absence of\n`--location-trusted`."},"relatedVulnerabilities":[]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-86413","versionConstraint":">= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-86413","fix":{"state":"fixed","versions":["8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86413","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86413","date":"2026-11-09","epss":0.00731,"percentile":0.54573}],"risk":0.661555,"urls":["https://curl.se/docs/CVE-2026-86413.html","https://curl.se/docs/CVE-2026-86413.json","https://hackerone.com/reports/3993549"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86413","description":"When using an *ambient user* in a first transfer doing Negotiate\nauthentication and asked to follow redirects, curl could pass on its\ncredential details to an unrelated second origin when asked to redirect there."},"relatedVulnerabilities":[]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6603","versionConstraint":">=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6603","fix":{"state":"fixed","versions":["1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-11-09","epss":0.00866,"percentile":0.58948}],"risk":0.6494999999999999,"urls":["https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847185","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."},"relatedVulnerabilities":[{"id":"CVE-2026-78659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-11-09","epss":0.00866,"percentile":0.58948}],"urls":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78659","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6603","versionConstraint":">=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6603","fix":{"state":"fixed","versions":["1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-11-09","epss":0.00866,"percentile":0.58948}],"risk":0.6494999999999999,"urls":["https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847185","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."},"relatedVulnerabilities":[{"id":"CVE-2026-78659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-11-09","epss":0.00866,"percentile":0.58948}],"urls":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78659","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."}]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-86412","versionConstraint":">= 8.18.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-86412","fix":{"state":"fixed","versions":["8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86412","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86412","date":"2026-11-09","epss":0.00828,"percentile":0.57769}],"risk":0.64584,"urls":["https://curl.se/docs/CVE-2026-86412.html","https://curl.se/docs/CVE-2026-86412.json","https://hackerone.com/reports/3973201"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86412","description":"A remote HTTP server can set a cookie that curl accepts and writes to a\nNetscape cookie jar but cannot reload. On the next invocation using the same\npath for `--cookie` and `--cookie-jar`, curl fails before connecting, then the\ncleanup procedure replaces the jar with an empty file, deleting cookies for\nunrelated domains."},"relatedVulnerabilities":[]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87863","versionConstraint":">= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.2.0, < 8.14.3||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87863","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87863","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87863","date":"2026-11-09","epss":0.00828,"percentile":0.57769}],"risk":0.64584,"urls":["https://curl.se/docs/CVE-2026-87863.html","https://curl.se/docs/CVE-2026-87863.json","https://hackerone.com/reports/3972373"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87863","description":"An authenticated HTTPS origin can supply an HSTS `max-age` value that the\nparser accepts, but time serialization later fails to process. On 64-bit\nsystems, extreme max-age values compute an absolute expiry within standard\ntime integer limits that exceeds calendar time structure bounds. During cache\nsaves, the original HSTS file is truncated before writing a temporary\nreplacement; when serialization fails, the temporary file is deleted, leaving\nan empty or partial cache. Because the save error is silently ignored during\ncleanup, curl exits successfully despite the data loss."},"relatedVulnerabilities":[]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-92386","versionConstraint":">= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0||>= 8.7.0, < 8.14.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-92386","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"},{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92386","cwe":"CWE-1284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92386","date":"2026-11-09","epss":0.00828,"percentile":0.57769}],"risk":0.64584,"urls":["https://curl.se/docs/CVE-2026-92386.html","https://curl.se/docs/CVE-2026-92386.json","https://hackerone.com/reports/4021979"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92386","description":"When writing a long cookie name and value to a Netscape cookie jar, a remote\nHTTP server can make `curl` write a record that exceeds its line-length\nparsing limit. Consequently, any subsequent `curl` invocation reading from\nthat same cookie jar using `--cookie` silently aborts parsing prematurely upon\nencountering the too long line, ignoring all subsequent valid cookies in the\nfile."},"relatedVulnerabilities":[]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6611","versionConstraint":">=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6611","fix":{"state":"fixed","versions":["1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-11-09","epss":0.00847,"percentile":0.58355}],"risk":0.6352500000000001,"urls":["https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847186","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."},"relatedVulnerabilities":[{"id":"CVE-2026-78669","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-11-09","epss":0.00847,"percentile":0.58355}],"urls":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6611","versionConstraint":">=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6611","fix":{"state":"fixed","versions":["1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-11-09","epss":0.00847,"percentile":0.58355}],"risk":0.6352500000000001,"urls":["https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847186","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."},"relatedVulnerabilities":[{"id":"CVE-2026-78669","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-11-09","epss":0.00847,"percentile":0.58355}],"urls":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."}]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-92388","versionConstraint":">= 7.21.0, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-92388","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92388","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92388","date":"2026-11-09","epss":0.00699,"percentile":0.53422}],"risk":0.632595,"urls":["https://curl.se/docs/CVE-2026-92388.html","https://curl.se/docs/CVE-2026-92388.json","https://hackerone.com/reports/4022070"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92388","description":"When an FTP wildcard `LIST` operation fails, libcurl omits the restoration\npath meant for successful listings, leaving the write callback set to the\ninternal listing parser and the write callback data pointing directly to the\neasy handle. Subsequent reuse of this handle triggers an immediate crash, and\ncloning it via `curl_easy_duphandle()` copies this corrupted state into the\nduplicate. If the original handle is subsequently freed, executing a transfer\non the cloned handle causes a heap use-after-free read against the dangling\nhandle reference; alternatively, reusing the original or cloned handle while\nchanging only  `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`)\nresults in type confusion, forcing the internal parser to interpret incoming\nserver response bytes into memory at the application-supplied write data\npointer."},"relatedVulnerabilities":[]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-86414","versionConstraint":">= 7.10.8, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-86414","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86414","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86414","date":"2026-11-09","epss":0.00676,"percentile":0.52525}],"risk":0.6117800000000001,"urls":["https://curl.se/docs/CVE-2026-86414.html","https://curl.se/docs/CVE-2026-86414.json","https://hackerone.com/reports/3993566"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86414","description":"An HTTP proxy can trick libcurl into sending the origin's credentials (Basic\npassword, or a Negotiate/Kerberos ticket) to the proxy itself, by answering\nthe `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the\nexpected 407 `Proxy-Authenticate:`."},"relatedVulnerabilities":[]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87861","versionConstraint":">= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87861","fix":{"state":"fixed","versions":["8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87861","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87861","date":"2026-11-09","epss":0.00676,"percentile":0.52525}],"risk":0.6117800000000001,"urls":["https://curl.se/docs/CVE-2026-87861.html","https://curl.se/docs/CVE-2026-87861.json","https://hackerone.com/reports/3972094"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87861","description":"When using ambient user credentials, an HTTP request directed to one origin\nmay be dispatched over a connection previously authenticated via Negotiate for\na different origin, leaving the request's intended credentials unused."},"relatedVulnerabilities":[]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-86410","versionConstraint":">= 7.81.0, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-86410","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86410","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86410","date":"2026-11-09","epss":0.00766,"percentile":0.55755}],"risk":0.59748,"urls":["https://curl.se/docs/CVE-2026-86410.html","https://curl.se/docs/CVE-2026-86410.json","https://hackerone.com/reports/3973176"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86410","description":"A flaw in the curl command line tool's logic makes it only set SSH host\nverification options when interacting directly using SFTP or SCP, and not as a\nresult of following a redirect."},"relatedVulnerabilities":[]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.14.3"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-92389","versionConstraint":">= 7.15.0, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, <= 8.22.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-92389","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92389","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92389","date":"2026-11-09","epss":0.00721,"percentile":0.54218}],"risk":0.56238,"urls":["https://curl.se/docs/CVE-2026-92389.html","https://curl.se/docs/CVE-2026-92389.json","https://hackerone.com/reports/4022568"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92389","description":"libcurl's TFTP state machine fails to validate state transitions against the\nrequested transfer direction, accepting opening server responses for both\nreads and writes interchangeably. A malicious TFTP server can respond to a\ndownload request in a way that forces the client into transmit mode, prompting\nlibcurl to consume and transmit data from the handle's persistent\n`CURLOPT_READDATA` pointer - including data remaining from unrelated prior\noperations, such as an HTTP POST request executed on a reused handle."},"relatedVulnerabilities":[]},{"artifact":{"id":"9539ef37ddab016b","cpes":["cpe:2.3:a:wget:wget:1.25.0-2ubuntu4.4:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/ubuntu/wget@1.25.0-2ubuntu4.4?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"1.25.0-2ubuntu4.4","language":"","licenses":["sha256:289d796794edf8c547691e415ddd7ba3396e6e6d8de03397bd69ce9515914bf8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-31879","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"wget","version":"1.25.0-2ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2021-31879","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-31879","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-31879","date":"2026-11-09","epss":0.01104,"percentile":0.65993}],"risk":0.5519999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-31879"},"relatedVulnerabilities":[{"id":"CVE-2021-31879","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-31879","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-31879","date":"2026-11-09","epss":0.01104,"percentile":0.65993}],"urls":["https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html","https://security.netapp.com/advisory/ntap-20210618-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-31879","description":"GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007."}]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107928","versionConstraint":">= 7.86.0, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107928","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107928","cwe":"CWE-126","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107928","date":"2026-11-09","epss":0.00705,"percentile":0.53631}],"risk":0.5499,"urls":["https://curl.se/docs/CVE-2026-107928.html","https://curl.se/docs/CVE-2026-107928.json","https://hackerone.com/reports/4099194"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107928","description":"When curl is built with GnuTLS, a malicious WebSocket server can make curl\nsend memory past its send buffer. This is due to an out of bounds read\nfollowing when `gnutls_record_send()` returns a number of bytes sent **greater\nthan the number of bytes it was given to send**. GnuTLS does that after a\nblocked send."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07e2bdbf9824034","cpes":["cpe:2.3:a:libcairo-gobject2:libcairo-gobject2:1.18.4-3:*:*:*:*:*:*:*","cpe:2.3:a:libcairo-gobject2:libcairo_gobject2:1.18.4-3:*:*:*:*:*:*:*","cpe:2.3:a:libcairo_gobject2:libcairo-gobject2:1.18.4-3:*:*:*:*:*:*:*","cpe:2.3:a:libcairo_gobject2:libcairo_gobject2:1.18.4-3:*:*:*:*:*:*:*","cpe:2.3:a:libcairo:libcairo-gobject2:1.18.4-3:*:*:*:*:*:*:*","cpe:2.3:a:libcairo:libcairo_gobject2:1.18.4-3:*:*:*:*:*:*:*"],"name":"libcairo-gobject2","purl":"pkg:deb/ubuntu/libcairo-gobject2@1.18.4-3?arch=amd64&distro=ubuntu-26.04&upstream=cairo","type":"deb","version":"1.18.4-3","language":"","licenses":["sha256:408fb9e704e875cd42d432e7c9b3b378f568e3c89db2b5c5ef3d11c025319574"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcairo-gobject2/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libcairo-gobject2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcairo-gobject2:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libcairo-gobject2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cairo"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-7475","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"cairo","version":"1.18.4-3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2017-7475","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-7475","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7475","date":"2026-11-09","epss":0.01824,"percentile":0.78948}],"risk":0.5471999999999999,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2017-7475"},"relatedVulnerabilities":[{"id":"CVE-2017-7475","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-7475","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7475","date":"2026-11-09","epss":0.01824,"percentile":0.78948}],"urls":["http://seclists.org/oss-sec/2017/q2/151","https://bugs.freedesktop.org/show_bug.cgi?id=100763","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-7475","description":"Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash."}]},{"artifact":{"id":"2e2b3ad82df9ae7a","cpes":["cpe:2.3:a:libcairo2:libcairo2:1.18.4-3:*:*:*:*:*:*:*"],"name":"libcairo2","purl":"pkg:deb/ubuntu/libcairo2@1.18.4-3?arch=amd64&distro=ubuntu-26.04&upstream=cairo","type":"deb","version":"1.18.4-3","language":"","licenses":["sha256:408fb9e704e875cd42d432e7c9b3b378f568e3c89db2b5c5ef3d11c025319574"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcairo2/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libcairo2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcairo2:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libcairo2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cairo"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-7475","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"cairo","version":"1.18.4-3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2017-7475","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-7475","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7475","date":"2026-11-09","epss":0.01824,"percentile":0.78948}],"risk":0.5471999999999999,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2017-7475"},"relatedVulnerabilities":[{"id":"CVE-2017-7475","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-7475","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7475","date":"2026-11-09","epss":0.01824,"percentile":0.78948}],"urls":["http://seclists.org/oss-sec/2017/q2/151","https://bugs.freedesktop.org/show_bug.cgi?id=100763","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-7475","description":"Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash."}]},{"artifact":{"id":"d91603f9b213058a","cpes":["cpe:2.3:a:libjpeg-turbo8:libjpeg-turbo8:2.1.5-4ubuntu4:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg-turbo8:libjpeg_turbo8:2.1.5-4ubuntu4:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg_turbo8:libjpeg-turbo8:2.1.5-4ubuntu4:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg_turbo8:libjpeg_turbo8:2.1.5-4ubuntu4:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg:libjpeg-turbo8:2.1.5-4ubuntu4:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg:libjpeg_turbo8:2.1.5-4ubuntu4:*:*:*:*:*:*:*"],"name":"libjpeg-turbo8","purl":"pkg:deb/ubuntu/libjpeg-turbo8@2.1.5-4ubuntu4?arch=amd64&distro=ubuntu-26.04&upstream=libjpeg-turbo","type":"deb","version":"2.1.5-4ubuntu4","language":"","licenses":["BSD-3-clause","BSD-BY-LC-NE","Expat","NTP","Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libjpeg-turbo8/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libjpeg-turbo8/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libjpeg-turbo8:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libjpeg-turbo8:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libjpeg-turbo"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-10126","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libjpeg-turbo","version":"2.1.5-4ubuntu4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2018-10126","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-10126","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-10126","date":"2026-11-09","epss":0.0182,"percentile":0.789}],"risk":0.546,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-10126"},"relatedVulnerabilities":[{"id":"CVE-2018-10126","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-10126","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-10126","date":"2026-11-09","epss":0.0182,"percentile":0.789}],"urls":["http://bugzilla.maptools.org/show_bug.cgi?id=2786","https://gitlab.com/libtiff/libtiff/-/issues/128","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-10126","description":"ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c."}]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6607","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6607","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-11-09","epss":0.00716,"percentile":0.54032}],"risk":0.5369999999999999,"urls":["https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847312","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references.\n\nWe now reject these as malformed and curb the memory amplification vector as a result."},"relatedVulnerabilities":[{"id":"CVE-2026-97031","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-11-09","epss":0.00716,"percentile":0.54032}],"urls":["https://go.dev/cl/847312","https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6607"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97031","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6607","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6607","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-11-09","epss":0.00716,"percentile":0.54032}],"risk":0.5369999999999999,"urls":["https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847312","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references.\n\nWe now reject these as malformed and curb the memory amplification vector as a result."},"relatedVulnerabilities":[{"id":"CVE-2026-97031","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-11-09","epss":0.00716,"percentile":0.54032}],"urls":["https://go.dev/cl/847312","https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6607"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97031","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result."}]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-32049","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-32049","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-32049","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32049","date":"2026-11-09","epss":0.01074,"percentile":0.6518}],"risk":0.5369999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-32049"},"relatedVulnerabilities":[{"id":"CVE-2025-32049","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32049","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32049","date":"2026-11-09","epss":0.01074,"percentile":0.6518}],"urls":["https://access.redhat.com/errata/RHSA-2025:21657","https://access.redhat.com/errata/RHSA-2025:8126","https://access.redhat.com/errata/RHSA-2025:8128","https://access.redhat.com/errata/RHSA-2025:8132","https://access.redhat.com/errata/RHSA-2025:8139","https://access.redhat.com/errata/RHSA-2025:8140","https://access.redhat.com/errata/RHSA-2025:8252","https://access.redhat.com/errata/RHSA-2025:8480","https://access.redhat.com/errata/RHSA-2025:8481","https://access.redhat.com/errata/RHSA-2025:8482","https://access.redhat.com/errata/RHSA-2025:8663","https://access.redhat.com/security/cve/CVE-2025-32049","https://bugzilla.redhat.com/show_bug.cgi?id=2357066","https://gitlab.gnome.org/GNOME/libsoup/-/issues/390","https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-32049","description":"A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service (DoS)."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-32049","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-32049","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-32049","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32049","date":"2026-11-09","epss":0.01074,"percentile":0.6518}],"risk":0.5369999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-32049"},"relatedVulnerabilities":[{"id":"CVE-2025-32049","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32049","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32049","date":"2026-11-09","epss":0.01074,"percentile":0.6518}],"urls":["https://access.redhat.com/errata/RHSA-2025:21657","https://access.redhat.com/errata/RHSA-2025:8126","https://access.redhat.com/errata/RHSA-2025:8128","https://access.redhat.com/errata/RHSA-2025:8132","https://access.redhat.com/errata/RHSA-2025:8139","https://access.redhat.com/errata/RHSA-2025:8140","https://access.redhat.com/errata/RHSA-2025:8252","https://access.redhat.com/errata/RHSA-2025:8480","https://access.redhat.com/errata/RHSA-2025:8481","https://access.redhat.com/errata/RHSA-2025:8482","https://access.redhat.com/errata/RHSA-2025:8663","https://access.redhat.com/security/cve/CVE-2025-32049","https://bugzilla.redhat.com/show_bug.cgi?id=2357066","https://gitlab.gnome.org/GNOME/libsoup/-/issues/390","https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-32049","description":"A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service (DoS)."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6608","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6608","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94440","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94440","date":"2026-11-09","epss":0.00706,"percentile":0.53638}],"risk":0.5295,"urls":["https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847307","description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes."},"relatedVulnerabilities":[{"id":"CVE-2026-94440","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94440","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94440","date":"2026-11-09","epss":0.00706,"percentile":0.53638}],"urls":["https://go.dev/cl/847307","https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6608"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94440","description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes."}]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6608","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6608","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94440","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94440","date":"2026-11-09","epss":0.00706,"percentile":0.53638}],"risk":0.5295,"urls":["https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847307","description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes."},"relatedVulnerabilities":[{"id":"CVE-2026-94440","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94440","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94440","date":"2026-11-09","epss":0.00706,"percentile":0.53638}],"urls":["https://go.dev/cl/847307","https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6608"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94440","description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes."}]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-107929","versionConstraint":">= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0||>= 8.9.0, < 8.14.3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-107929","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"},{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107929","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107929","date":"2026-11-09","epss":0.00667,"percentile":0.52157}],"risk":0.52026,"urls":["https://curl.se/docs/CVE-2026-107929.html","https://curl.se/docs/CVE-2026-107929.json","https://hackerone.com/reports/4099618"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107929","description":"When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is\nset with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that\nbinding is not part of the connection reuse key, so a later transfer asking\nfor a different source can silently reuse an existing connection and go out\nfrom the earlier transfer's source address"},"relatedVulnerabilities":[]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6604","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6604","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56857","cwe":"CWE-1386","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56857","date":"2026-11-09","epss":0.00553,"percentile":0.46491}],"risk":0.5198200000000001,"urls":["https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847305","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target)."},"relatedVulnerabilities":[{"id":"CVE-2026-56857","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56857","cwe":"CWE-1386","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56857","date":"2026-11-09","epss":0.00553,"percentile":0.46491}],"urls":["https://go.dev/cl/847305","https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6604"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56857","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target)."}]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6604","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6604","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56857","cwe":"CWE-1386","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56857","date":"2026-11-09","epss":0.00553,"percentile":0.46491}],"risk":0.5198200000000001,"urls":["https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847305","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target)."},"relatedVulnerabilities":[{"id":"CVE-2026-56857","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56857","cwe":"CWE-1386","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56857","date":"2026-11-09","epss":0.00553,"percentile":0.46491}],"urls":["https://go.dev/cl/847305","https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6604"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56857","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target)."}]},{"artifact":{"id":"7c2a4c4f2edf104e","cpes":["cpe:2.3:a:libopenjp2-7:libopenjp2-7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7","purl":"pkg:deb/ubuntu/libopenjp2-7@2.5.4-1ubuntu0.1?arch=amd64&distro=ubuntu-26.04&upstream=openjpeg2","type":"deb","version":"2.5.4-1ubuntu0.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libopenjp2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-6988","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjpeg2","version":"2.5.4-1ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2019-6988","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-6988","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-6988","date":"2026-11-09","epss":0.01724,"percentile":0.77683}],"risk":0.5172,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-6988"},"relatedVulnerabilities":[{"id":"CVE-2019-6988","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-6988","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-6988","date":"2026-11-09","epss":0.01724,"percentile":0.77683}],"urls":["http://www.securityfocus.com/bid/106785","https://github.com/uclouvain/openjpeg/issues/1178"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-6988","description":"An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress."}]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6617","versionConstraint":">=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6617","fix":{"state":"fixed","versions":["1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97032","cwe":"CWE-362","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97032","date":"2026-11-09","epss":0.00676,"percentile":0.52518}],"risk":0.507,"urls":["https://go.dev/cl/847313","https://go.dev/issue/81867","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847188","description":"HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server."},"relatedVulnerabilities":[{"id":"CVE-2026-97032","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97032","cwe":"CWE-362","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97032","date":"2026-11-09","epss":0.00676,"percentile":0.52518}],"urls":["https://go.dev/cl/847188","https://go.dev/cl/847313","https://go.dev/issue/81867","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6617"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97032","description":"HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6617","versionConstraint":">=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6617","fix":{"state":"fixed","versions":["1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97032","cwe":"CWE-362","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97032","date":"2026-11-09","epss":0.00676,"percentile":0.52518}],"risk":0.507,"urls":["https://go.dev/cl/847313","https://go.dev/issue/81867","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847188","description":"HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server."},"relatedVulnerabilities":[{"id":"CVE-2026-97032","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97032","cwe":"CWE-362","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97032","date":"2026-11-09","epss":0.00676,"percentile":0.52518}],"urls":["https://go.dev/cl/847188","https://go.dev/cl/847313","https://go.dev/issue/81867","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6617"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97032","description":"HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server."}]},{"artifact":{"id":"89f5a227075557cd","cpes":["cpe:2.3:a:xterm:xterm:407-1ubuntu1:*:*:*:*:*:*:*"],"name":"xterm","purl":"pkg:deb/ubuntu/xterm@407-1ubuntu1?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"407-1ubuntu1","language":"","licenses":["sha256:dfd1f834a3a769e846903201c97b3a1c22ed6ee34d64051ee840e5cabd6a78b4"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xterm/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/xterm/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xterm.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/xterm.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xterm.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/xterm.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xterm.list","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/xterm.list"},{"path":"/var/lib/dpkg/info/xterm.postinst","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/xterm.postinst"},{"path":"/var/lib/dpkg/info/xterm.prerm","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/xterm.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-24130","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xterm","version":"407-1ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2022-24130","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-24130","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-24130","date":"2026-11-09","epss":0.0168,"percentile":0.77103}],"risk":0.5039999999999999,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-24130"},"relatedVulnerabilities":[{"id":"CVE-2022-24130","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-24130","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-24130","date":"2026-11-09","epss":0.0168,"percentile":0.77103}],"urls":["https://invisible-island.net/xterm/xterm.log.html","https://lists.debian.org/debian-lts-announce/2022/02/msg00007.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP5Y4O7WBNLV24D22E6LE7RQFYOUVD2U/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4CWYYEBT6AJRJBBQU2KLUOQDHRM7WAV/","https://security.gentoo.org/glsa/202208-22","https://twitter.com/nickblack/status/1487731459398025216","https://www.openwall.com/lists/oss-security/2022/01/30/2","https://www.openwall.com/lists/oss-security/2022/01/30/3"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-24130","description":"xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6609","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6609","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78667","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78667","date":"2026-11-09","epss":0.00663,"percentile":0.51995}],"risk":0.49724999999999997,"urls":["https://go.dev/issue/81858","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847309","description":"When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU."},"relatedVulnerabilities":[{"id":"CVE-2026-78667","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78667","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78667","date":"2026-11-09","epss":0.00663,"percentile":0.51995}],"urls":["https://go.dev/cl/847309","https://go.dev/issue/81858","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6609"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78667","description":"When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU."}]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6609","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6609","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78667","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78667","date":"2026-11-09","epss":0.00663,"percentile":0.51995}],"risk":0.49724999999999997,"urls":["https://go.dev/issue/81858","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847309","description":"When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU."},"relatedVulnerabilities":[{"id":"CVE-2026-78667","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78667","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78667","date":"2026-11-09","epss":0.00663,"percentile":0.51995}],"urls":["https://go.dev/cl/847309","https://go.dev/issue/81858","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6609"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78667","description":"When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU."}]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87866","versionConstraint":">= 7.43.0, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87866","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87866","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87866","date":"2026-11-09","epss":0.0051,"percentile":0.43764}],"risk":0.46155000000000007,"urls":["https://curl.se/docs/CVE-2026-87866.html","https://curl.se/docs/CVE-2026-87866.json","https://hackerone.com/reports/3989514"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87866","description":"When built with wolfSSL, curl can successfully validate a pinned public key\nhash against a key the TLS peer does not possess. During the TLS handshake,\nwolfSSL validates the connection, but curl's subsequent re-parsing of the same\ncertificate - tricked by a manipulated validity length field - extracts and\nmatches a different embedded key, incorrectly authorizing the pinned public\nkey."},"relatedVulnerabilities":[]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6605","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6605","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56866","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56866","date":"2026-11-09","epss":0.00604,"percentile":0.49175}],"risk":0.453,"urls":["https://go.dev/issue/81740","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847306","description":"When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning."},"relatedVulnerabilities":[{"id":"CVE-2026-56866","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56866","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56866","date":"2026-11-09","epss":0.00604,"percentile":0.49175}],"urls":["https://go.dev/cl/847306","https://go.dev/issue/81740","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6605"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56866","description":"When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6605","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6605","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56866","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56866","date":"2026-11-09","epss":0.00604,"percentile":0.49175}],"risk":0.453,"urls":["https://go.dev/issue/81740","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847306","description":"When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning."},"relatedVulnerabilities":[{"id":"CVE-2026-56866","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56866","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56866","date":"2026-11-09","epss":0.00604,"percentile":0.49175}],"urls":["https://go.dev/cl/847306","https://go.dev/issue/81740","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6605"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56866","description":"When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning."}]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-87865","versionConstraint":">= 7.69.1, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-87865","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87865","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87865","date":"2026-11-09","epss":0.00604,"percentile":0.49212}],"risk":0.44998,"urls":["https://curl.se/docs/CVE-2026-87865.html","https://curl.se/docs/CVE-2026-87865.json","https://hackerone.com/reports/3975408"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87865","description":"When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated\ninitial entry can cause host key validation to report a key *mismatch* as a\n*missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback."},"relatedVulnerabilities":[]},{"artifact":{"id":"d07e2bdbf9824034","cpes":["cpe:2.3:a:libcairo-gobject2:libcairo-gobject2:1.18.4-3:*:*:*:*:*:*:*","cpe:2.3:a:libcairo-gobject2:libcairo_gobject2:1.18.4-3:*:*:*:*:*:*:*","cpe:2.3:a:libcairo_gobject2:libcairo-gobject2:1.18.4-3:*:*:*:*:*:*:*","cpe:2.3:a:libcairo_gobject2:libcairo_gobject2:1.18.4-3:*:*:*:*:*:*:*","cpe:2.3:a:libcairo:libcairo-gobject2:1.18.4-3:*:*:*:*:*:*:*","cpe:2.3:a:libcairo:libcairo_gobject2:1.18.4-3:*:*:*:*:*:*:*"],"name":"libcairo-gobject2","purl":"pkg:deb/ubuntu/libcairo-gobject2@1.18.4-3?arch=amd64&distro=ubuntu-26.04&upstream=cairo","type":"deb","version":"1.18.4-3","language":"","licenses":["sha256:408fb9e704e875cd42d432e7c9b3b378f568e3c89db2b5c5ef3d11c025319574"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcairo-gobject2/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libcairo-gobject2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcairo-gobject2:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libcairo-gobject2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cairo"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-18064","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"cairo","version":"1.18.4-3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2018-18064","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-18064","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-18064","date":"2026-11-09","epss":0.0148,"percentile":0.74103}],"risk":0.44400000000000006,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-18064"},"relatedVulnerabilities":[{"id":"CVE-2018-18064","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-18064","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-18064","date":"2026-11-09","epss":0.0148,"percentile":0.74103}],"urls":["https://gitlab.freedesktop.org/cairo/cairo/issues/341","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-18064","description":"cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function)."}]},{"artifact":{"id":"2e2b3ad82df9ae7a","cpes":["cpe:2.3:a:libcairo2:libcairo2:1.18.4-3:*:*:*:*:*:*:*"],"name":"libcairo2","purl":"pkg:deb/ubuntu/libcairo2@1.18.4-3?arch=amd64&distro=ubuntu-26.04&upstream=cairo","type":"deb","version":"1.18.4-3","language":"","licenses":["sha256:408fb9e704e875cd42d432e7c9b3b378f568e3c89db2b5c5ef3d11c025319574"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcairo2/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libcairo2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcairo2:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libcairo2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cairo"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-18064","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"cairo","version":"1.18.4-3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2018-18064","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-18064","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-18064","date":"2026-11-09","epss":0.0148,"percentile":0.74103}],"risk":0.44400000000000006,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-18064"},"relatedVulnerabilities":[{"id":"CVE-2018-18064","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-18064","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-18064","date":"2026-11-09","epss":0.0148,"percentile":0.74103}],"urls":["https://gitlab.freedesktop.org/cairo/cairo/issues/341","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-18064","description":"cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function)."}]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-92390","versionConstraint":">= 7.20.0, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-92390","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92390","cwe":"CWE-73","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92390","date":"2026-11-09","epss":0.00589,"percentile":0.48455}],"risk":0.44175000000000003,"urls":["https://curl.se/docs/CVE-2026-92390.html","https://curl.se/docs/CVE-2026-92390.json","https://hackerone.com/reports/4023192"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92390","description":"When invoked with `--remote-header-name` (`-J`), curl fails to preserve its\ndocumented anti-clobbering protection if an intermediate 103 Early Hints\nresponse precedes the final HTTP response, or if an `ETag` header is processed\nbefore `Content-Disposition` under `--etag-save`. This flaw allows an HTTP(S)\nserver to overwrite an existing local file specified in the\n`Content-Disposition` header despite the presence of the `-J` non-overwrite\nconstraint."},"relatedVulnerabilities":[]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15709","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15709","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15709","cwe":"CWE-409","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15709","date":"2026-11-09","epss":0.00883,"percentile":0.59443}],"risk":0.44149999999999995,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15709"},"relatedVulnerabilities":[{"id":"CVE-2026-15709","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15709","cwe":"CWE-409","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15709","date":"2026-11-09","epss":0.00883,"percentile":0.59443}],"urls":["https://access.redhat.com/errata/RHSA-2026:68234","https://access.redhat.com/errata/RHSA-2026:68235","https://access.redhat.com/errata/RHSA-2026:68612","https://access.redhat.com/errata/RHSA-2026:69108","https://access.redhat.com/errata/RHSA-2026:69297","https://access.redhat.com/errata/RHSA-2026:69863","https://access.redhat.com/errata/RHSA-2026:70598","https://access.redhat.com/errata/RHSA-2026:70599","https://access.redhat.com/errata/RHSA-2026:71389","https://access.redhat.com/security/cve/CVE-2026-15709","https://bugzilla.redhat.com/show_bug.cgi?id=2499922","https://gitlab.gnome.org/GNOME/libsoup/-/issues/511"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15709","description":"A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes data in chunks without enforcing an upper boundary limit on the output buffer size. While libsoup limits the incoming compressed frame size via max_incoming_payload_size, it fails to track or limit memory allocation during decompression. A separate check for decompressed size (max_total_message_size) exists but executes only after inflation is complete, and it is entirely disabled by default for client connections. A remote, unauthenticated attacker can exploit this by sending a small, highly compressed payload (a decompression bomb), causing unbounded memory allocation that triggers an Out-of-Memory (OOM) crash and a Denial of Service (DoS)."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15709","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15709","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15709","cwe":"CWE-409","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15709","date":"2026-11-09","epss":0.00883,"percentile":0.59443}],"risk":0.44149999999999995,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15709"},"relatedVulnerabilities":[{"id":"CVE-2026-15709","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15709","cwe":"CWE-409","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15709","date":"2026-11-09","epss":0.00883,"percentile":0.59443}],"urls":["https://access.redhat.com/errata/RHSA-2026:68234","https://access.redhat.com/errata/RHSA-2026:68235","https://access.redhat.com/errata/RHSA-2026:68612","https://access.redhat.com/errata/RHSA-2026:69108","https://access.redhat.com/errata/RHSA-2026:69297","https://access.redhat.com/errata/RHSA-2026:69863","https://access.redhat.com/errata/RHSA-2026:70598","https://access.redhat.com/errata/RHSA-2026:70599","https://access.redhat.com/errata/RHSA-2026:71389","https://access.redhat.com/security/cve/CVE-2026-15709","https://bugzilla.redhat.com/show_bug.cgi?id=2499922","https://gitlab.gnome.org/GNOME/libsoup/-/issues/511"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15709","description":"A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) processes data in chunks without enforcing an upper boundary limit on the output buffer size. While libsoup limits the incoming compressed frame size via max_incoming_payload_size, it fails to track or limit memory allocation during decompression. A separate check for decompressed size (max_total_message_size) exists but executes only after inflation is complete, and it is entirely disabled by default for client connections. A remote, unauthenticated attacker can exploit this by sending a small, highly compressed payload (a decompression bomb), causing unbounded memory allocation that triggers an Out-of-Memory (OOM) crash and a Denial of Service (DoS)."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-12781","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-12781","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-11-09","epss":0.00859,"percentile":0.58736}],"risk":0.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-12781"},"relatedVulnerabilities":[{"id":"CVE-2025-12781","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-11-09","epss":0.00859,"percentile":0.58736}],"urls":["https://github.com/python/cpython/commit/13360efd385d1a7d0659beba03787ea3d063ef9b","https://github.com/python/cpython/commit/1be80bec7960f5ccd059e75f3dfbd45fca302947","https://github.com/python/cpython/commit/9060b4abbe475591b6230b23c2afefeff26fcca5","https://github.com/python/cpython/commit/e95e783dff443b68e8179fdb57737025bf02ba76","https://github.com/python/cpython/commit/fd17ee026fa9b67f6288cbafe374a3e479fe03a5","https://github.com/python/cpython/issues/125346","https://github.com/python/cpython/pull/141128","https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-12781","description":"When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \"base64\" module the characters \"+/\" will always be accepted, regardless of the value of \"altchars\" parameter, typically used to establish an \"alternative base64 alphabet\" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \"+/\"). If your application does not use the \"altchars\" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \"+\" or \"/\" outside of altchars."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-12781","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-12781","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-11-09","epss":0.00859,"percentile":0.58736}],"risk":0.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-12781"},"relatedVulnerabilities":[{"id":"CVE-2025-12781","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-11-09","epss":0.00859,"percentile":0.58736}],"urls":["https://github.com/python/cpython/commit/13360efd385d1a7d0659beba03787ea3d063ef9b","https://github.com/python/cpython/commit/1be80bec7960f5ccd059e75f3dfbd45fca302947","https://github.com/python/cpython/commit/9060b4abbe475591b6230b23c2afefeff26fcca5","https://github.com/python/cpython/commit/e95e783dff443b68e8179fdb57737025bf02ba76","https://github.com/python/cpython/commit/fd17ee026fa9b67f6288cbafe374a3e479fe03a5","https://github.com/python/cpython/issues/125346","https://github.com/python/cpython/pull/141128","https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-12781","description":"When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \"base64\" module the characters \"+/\" will always be accepted, regardless of the value of \"altchars\" parameter, typically used to establish an \"alternative base64 alphabet\" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \"+/\"). If your application does not use the \"altchars\" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \"+\" or \"/\" outside of altchars."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-12781","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-12781","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-11-09","epss":0.00859,"percentile":0.58736}],"risk":0.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-12781"},"relatedVulnerabilities":[{"id":"CVE-2025-12781","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-11-09","epss":0.00859,"percentile":0.58736}],"urls":["https://github.com/python/cpython/commit/13360efd385d1a7d0659beba03787ea3d063ef9b","https://github.com/python/cpython/commit/1be80bec7960f5ccd059e75f3dfbd45fca302947","https://github.com/python/cpython/commit/9060b4abbe475591b6230b23c2afefeff26fcca5","https://github.com/python/cpython/commit/e95e783dff443b68e8179fdb57737025bf02ba76","https://github.com/python/cpython/commit/fd17ee026fa9b67f6288cbafe374a3e479fe03a5","https://github.com/python/cpython/issues/125346","https://github.com/python/cpython/pull/141128","https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-12781","description":"When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \"base64\" module the characters \"+/\" will always be accepted, regardless of the value of \"altchars\" parameter, typically used to establish an \"alternative base64 alphabet\" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \"+/\"). If your application does not use the \"altchars\" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \"+\" or \"/\" outside of altchars."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-12781","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-12781","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-11-09","epss":0.00859,"percentile":0.58736}],"risk":0.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-12781"},"relatedVulnerabilities":[{"id":"CVE-2025-12781","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-11-09","epss":0.00859,"percentile":0.58736}],"urls":["https://github.com/python/cpython/commit/13360efd385d1a7d0659beba03787ea3d063ef9b","https://github.com/python/cpython/commit/1be80bec7960f5ccd059e75f3dfbd45fca302947","https://github.com/python/cpython/commit/9060b4abbe475591b6230b23c2afefeff26fcca5","https://github.com/python/cpython/commit/e95e783dff443b68e8179fdb57737025bf02ba76","https://github.com/python/cpython/commit/fd17ee026fa9b67f6288cbafe374a3e479fe03a5","https://github.com/python/cpython/issues/125346","https://github.com/python/cpython/pull/141128","https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-12781","description":"When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \"base64\" module the characters \"+/\" will always be accepted, regardless of the value of \"altchars\" parameter, typically used to establish an \"alternative base64 alphabet\" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \"+/\"). If your application does not use the \"altchars\" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \"+\" or \"/\" outside of altchars."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-12781","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-12781","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-11-09","epss":0.00859,"percentile":0.58736}],"risk":0.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-12781"},"relatedVulnerabilities":[{"id":"CVE-2025-12781","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-11-09","epss":0.00859,"percentile":0.58736}],"urls":["https://github.com/python/cpython/commit/13360efd385d1a7d0659beba03787ea3d063ef9b","https://github.com/python/cpython/commit/1be80bec7960f5ccd059e75f3dfbd45fca302947","https://github.com/python/cpython/commit/9060b4abbe475591b6230b23c2afefeff26fcca5","https://github.com/python/cpython/commit/e95e783dff443b68e8179fdb57737025bf02ba76","https://github.com/python/cpython/commit/fd17ee026fa9b67f6288cbafe374a3e479fe03a5","https://github.com/python/cpython/issues/125346","https://github.com/python/cpython/pull/141128","https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-12781","description":"When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \"base64\" module the characters \"+/\" will always be accepted, regardless of the value of \"altchars\" parameter, typically used to establish an \"alternative base64 alphabet\" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \"+/\"). If your application does not use the \"altchars\" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \"+\" or \"/\" outside of altchars."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64831","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-11-09","epss":0.00851,"percentile":0.58472}],"risk":0.4255,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64831"},"relatedVulnerabilities":[{"id":"CVE-2026-64831","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-11-09","epss":0.00851,"percentile":0.58472}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64831","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-11-09","epss":0.00851,"percentile":0.58472}],"risk":0.4255,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64831"},"relatedVulnerabilities":[{"id":"CVE-2026-64831","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-11-09","epss":0.00851,"percentile":0.58472}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64831","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64831","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-11-09","epss":0.00851,"percentile":0.58472}],"risk":0.4255,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64831"},"relatedVulnerabilities":[{"id":"CVE-2026-64831","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64831","cwe":"CWE-121","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64831","date":"2026-11-09","epss":0.00851,"percentile":0.58472}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23665","https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-vulkan-hevc-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64831","description":"FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vps_num_hrd_parameters value exceeding HEVC_MAX_SUB_LAYERS in any supported container format to overflow stack-allocated arrays in the vk_hevc_end_frame function, potentially achieving arbitrary code execution."}]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-94266","versionConstraint":">= 7.62.0, < 8.14.3||>= 8.15.0, < 8.16.2||>= 8.17.0, < 8.20.2||>= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-94266","fix":{"state":"fixed","versions":["8.14.3","8.16.2","8.20.2","8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.14.3"},{"date":"2026-10-28","kind":"first-observed","version":"8.16.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.20.2"},{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94266","cwe":"CWE-522","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94266","date":"2026-11-09","epss":0.00556,"percentile":0.46645}],"risk":0.41700000000000004,"urls":["https://curl.se/docs/CVE-2026-94266.html","https://curl.se/docs/CVE-2026-94266.json","https://hackerone.com/reports/4041053"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94266","description":"libcurl could accidentally return a URL for `curl_easy_getinfo()`'s\n`CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither\nthe URL provided to libcurl nor the redirected URL did."},"relatedVulnerabilities":[]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6610","versionConstraint":">=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6610","fix":{"state":"fixed","versions":["1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-11-09","epss":0.00542,"percentile":0.45858}],"risk":0.40650000000000003,"urls":["https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/835145","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."},"relatedVulnerabilities":[{"id":"CVE-2026-78660","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-11-09","epss":0.00542,"percentile":0.45858}],"urls":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78660","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6610","versionConstraint":">=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6610","fix":{"state":"fixed","versions":["1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-11-09","epss":0.00542,"percentile":0.45858}],"risk":0.40650000000000003,"urls":["https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/835145","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."},"relatedVulnerabilities":[{"id":"CVE-2026-78660","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-11-09","epss":0.00542,"percentile":0.45858}],"urls":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78660","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6613","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6613","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-11-09","epss":0.00528,"percentile":0.45004}],"risk":0.396,"urls":["https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847311","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP.\n\nThe impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."},"relatedVulnerabilities":[{"id":"CVE-2026-94439","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-11-09","epss":0.00528,"percentile":0.45004}],"urls":["https://go.dev/cl/847311","https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6613"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94439","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."}]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6613","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6613","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-11-09","epss":0.00528,"percentile":0.45004}],"risk":0.396,"urls":["https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847311","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP.\n\nThe impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."},"relatedVulnerabilities":[{"id":"CVE-2026-94439","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-11-09","epss":0.00528,"percentile":0.45004}],"urls":["https://go.dev/cl/847311","https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6613"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94439","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11940","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-11940","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-11-09","epss":0.0075,"percentile":0.55243}],"risk":0.375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11940"},"relatedVulnerabilities":[{"id":"CVE-2026-11940","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-11-09","epss":0.0075,"percentile":0.55243}],"urls":["https://github.com/python/cpython/commit/0f852b3f07dd8e71e40326a51c02afbf16a42cc5","https://github.com/python/cpython/commit/27dd970bf6b17ebca7c8ed486a40ab043ed7af8f","https://github.com/python/cpython/commit/672825e2f36a57e173959b0d9d409d4560dab8df","https://github.com/python/cpython/commit/771d12dda5140313db0ac550292987975651bbde","https://github.com/python/cpython/commit/79c06bd5c6afa3c440d50faf7ee1b147c8832b4c","https://github.com/python/cpython/commit/be13e86f6b9788a6f4d0419dffef72cbae5865c9","https://github.com/python/cpython/commit/e5fdbd8d5aa923bd9111b112ea73bd6ec7c47877","https://github.com/python/cpython/issues/151558","https://github.com/python/cpython/pull/151559","https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11940","description":"tarfile.extractall() with the 'data' or 'tar'\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself.  \nThe extraction fallback validated the symlink at it's archived location \nbut recreated it at the hardlink's shallower\npath, letting a relative\n target the filter judged contained escape the destination directory.  \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11940","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-11940","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-11-09","epss":0.0075,"percentile":0.55243}],"risk":0.375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11940"},"relatedVulnerabilities":[{"id":"CVE-2026-11940","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-11-09","epss":0.0075,"percentile":0.55243}],"urls":["https://github.com/python/cpython/commit/0f852b3f07dd8e71e40326a51c02afbf16a42cc5","https://github.com/python/cpython/commit/27dd970bf6b17ebca7c8ed486a40ab043ed7af8f","https://github.com/python/cpython/commit/672825e2f36a57e173959b0d9d409d4560dab8df","https://github.com/python/cpython/commit/771d12dda5140313db0ac550292987975651bbde","https://github.com/python/cpython/commit/79c06bd5c6afa3c440d50faf7ee1b147c8832b4c","https://github.com/python/cpython/commit/be13e86f6b9788a6f4d0419dffef72cbae5865c9","https://github.com/python/cpython/commit/e5fdbd8d5aa923bd9111b112ea73bd6ec7c47877","https://github.com/python/cpython/issues/151558","https://github.com/python/cpython/pull/151559","https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11940","description":"tarfile.extractall() with the 'data' or 'tar'\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself.  \nThe extraction fallback validated the symlink at it's archived location \nbut recreated it at the hardlink's shallower\npath, letting a relative\n target the filter judged contained escape the destination directory.  \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-11940","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-11940","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-11-09","epss":0.0075,"percentile":0.55243}],"risk":0.375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11940"},"relatedVulnerabilities":[{"id":"CVE-2026-11940","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-11-09","epss":0.0075,"percentile":0.55243}],"urls":["https://github.com/python/cpython/commit/0f852b3f07dd8e71e40326a51c02afbf16a42cc5","https://github.com/python/cpython/commit/27dd970bf6b17ebca7c8ed486a40ab043ed7af8f","https://github.com/python/cpython/commit/672825e2f36a57e173959b0d9d409d4560dab8df","https://github.com/python/cpython/commit/771d12dda5140313db0ac550292987975651bbde","https://github.com/python/cpython/commit/79c06bd5c6afa3c440d50faf7ee1b147c8832b4c","https://github.com/python/cpython/commit/be13e86f6b9788a6f4d0419dffef72cbae5865c9","https://github.com/python/cpython/commit/e5fdbd8d5aa923bd9111b112ea73bd6ec7c47877","https://github.com/python/cpython/issues/151558","https://github.com/python/cpython/pull/151559","https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11940","description":"tarfile.extractall() with the 'data' or 'tar'\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself.  \nThe extraction fallback validated the symlink at it's archived location \nbut recreated it at the hardlink's shallower\npath, letting a relative\n target the filter judged contained escape the destination directory.  \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11940","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-11940","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-11-09","epss":0.0075,"percentile":0.55243}],"risk":0.375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11940"},"relatedVulnerabilities":[{"id":"CVE-2026-11940","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-11-09","epss":0.0075,"percentile":0.55243}],"urls":["https://github.com/python/cpython/commit/0f852b3f07dd8e71e40326a51c02afbf16a42cc5","https://github.com/python/cpython/commit/27dd970bf6b17ebca7c8ed486a40ab043ed7af8f","https://github.com/python/cpython/commit/672825e2f36a57e173959b0d9d409d4560dab8df","https://github.com/python/cpython/commit/771d12dda5140313db0ac550292987975651bbde","https://github.com/python/cpython/commit/79c06bd5c6afa3c440d50faf7ee1b147c8832b4c","https://github.com/python/cpython/commit/be13e86f6b9788a6f4d0419dffef72cbae5865c9","https://github.com/python/cpython/commit/e5fdbd8d5aa923bd9111b112ea73bd6ec7c47877","https://github.com/python/cpython/issues/151558","https://github.com/python/cpython/pull/151559","https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11940","description":"tarfile.extractall() with the 'data' or 'tar'\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself.  \nThe extraction fallback validated the symlink at it's archived location \nbut recreated it at the hardlink's shallower\npath, letting a relative\n target the filter judged contained escape the destination directory.  \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11940","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-11940","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-11-09","epss":0.0075,"percentile":0.55243}],"risk":0.375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11940"},"relatedVulnerabilities":[{"id":"CVE-2026-11940","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-11-09","epss":0.0075,"percentile":0.55243}],"urls":["https://github.com/python/cpython/commit/0f852b3f07dd8e71e40326a51c02afbf16a42cc5","https://github.com/python/cpython/commit/27dd970bf6b17ebca7c8ed486a40ab043ed7af8f","https://github.com/python/cpython/commit/672825e2f36a57e173959b0d9d409d4560dab8df","https://github.com/python/cpython/commit/771d12dda5140313db0ac550292987975651bbde","https://github.com/python/cpython/commit/79c06bd5c6afa3c440d50faf7ee1b147c8832b4c","https://github.com/python/cpython/commit/be13e86f6b9788a6f4d0419dffef72cbae5865c9","https://github.com/python/cpython/commit/e5fdbd8d5aa923bd9111b112ea73bd6ec7c47877","https://github.com/python/cpython/issues/151558","https://github.com/python/cpython/pull/151559","https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11940","description":"tarfile.extractall() with the 'data' or 'tar'\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself.  \nThe extraction fallback validated the symlink at it's archived location \nbut recreated it at the hardlink's shallower\npath, letting a relative\n target the filter judged contained escape the destination directory.  \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330."}]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15711","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15711","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15711","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15711","date":"2026-11-09","epss":0.00745,"percentile":0.55079}],"risk":0.3725,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15711"},"relatedVulnerabilities":[{"id":"CVE-2026-15711","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15711","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15711","date":"2026-11-09","epss":0.00745,"percentile":0.55079}],"urls":["https://access.redhat.com/errata/RHSA-2026:68234","https://access.redhat.com/errata/RHSA-2026:68235","https://access.redhat.com/errata/RHSA-2026:68266","https://access.redhat.com/errata/RHSA-2026:68612","https://access.redhat.com/errata/RHSA-2026:69108","https://access.redhat.com/errata/RHSA-2026:69297","https://access.redhat.com/errata/RHSA-2026:69863","https://access.redhat.com/errata/RHSA-2026:70598","https://access.redhat.com/errata/RHSA-2026:70599","https://access.redhat.com/errata/RHSA-2026:71389","https://access.redhat.com/security/cve/CVE-2026-15711","https://bugzilla.redhat.com/show_bug.cgi?id=2499924","https://gitlab.gnome.org/GNOME/libsoup/-/issues/515"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15711","description":"A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which mandates that all WebSocket control frames (e.g., PING, PONG, CLOSE) contain a payload of 125 bytes or less. A remote, unauthenticated attacker can exploit this by sending a non-compliant, oversized control frame. Because the parser handles this protocol violation improperly instead of throwing an immediate connection termination error, it triggers a internal processing crash, resulting in a remote denial of service (DoS) for applications utilizing libsoup WebSockets."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15711","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15711","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15711","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15711","date":"2026-11-09","epss":0.00745,"percentile":0.55079}],"risk":0.3725,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15711"},"relatedVulnerabilities":[{"id":"CVE-2026-15711","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15711","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15711","date":"2026-11-09","epss":0.00745,"percentile":0.55079}],"urls":["https://access.redhat.com/errata/RHSA-2026:68234","https://access.redhat.com/errata/RHSA-2026:68235","https://access.redhat.com/errata/RHSA-2026:68266","https://access.redhat.com/errata/RHSA-2026:68612","https://access.redhat.com/errata/RHSA-2026:69108","https://access.redhat.com/errata/RHSA-2026:69297","https://access.redhat.com/errata/RHSA-2026:69863","https://access.redhat.com/errata/RHSA-2026:70598","https://access.redhat.com/errata/RHSA-2026:70599","https://access.redhat.com/errata/RHSA-2026:71389","https://access.redhat.com/security/cve/CVE-2026-15711","https://bugzilla.redhat.com/show_bug.cgi?id=2499924","https://gitlab.gnome.org/GNOME/libsoup/-/issues/515"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15711","description":"A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which mandates that all WebSocket control frames (e.g., PING, PONG, CLOSE) contain a payload of 125 bytes or less. A remote, unauthenticated attacker can exploit this by sending a non-compliant, oversized control frame. Because the parser handles this protocol violation improperly instead of throwing an immediate connection termination error, it triggers a internal processing crash, resulting in a remote denial of service (DoS) for applications utilizing libsoup WebSockets."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-17084","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-17084","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-17084","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-17084","date":"2026-11-09","epss":0.00734,"percentile":0.54682}],"risk":0.367,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-17084"},"relatedVulnerabilities":[{"id":"CVE-2026-17084","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-17084","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-17084","date":"2026-11-09","epss":0.00734,"percentile":0.54682}],"urls":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","http://www.openwall.com/lists/oss-security/2026/08/18/2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-17084","description":"The \"stringprep\" module didn't process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unicode codepoint attributes were used \ninstead of the specified Unicode 3.2.0. This behavior would cause \nmismatches when processing domain names using IDNA 2003 (the \"idna\" \ncodec) and the in_table_b2() function of the \"stringprep\" module. This \nonly affects domain names containing characters that were not previously\n registered or had their Unicode attributes such as case-folding \nbehavior updated since Unicode 3.2.0."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-17084","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-17084","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-17084","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-17084","date":"2026-11-09","epss":0.00734,"percentile":0.54682}],"risk":0.367,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-17084"},"relatedVulnerabilities":[{"id":"CVE-2026-17084","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-17084","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-17084","date":"2026-11-09","epss":0.00734,"percentile":0.54682}],"urls":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","http://www.openwall.com/lists/oss-security/2026/08/18/2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-17084","description":"The \"stringprep\" module didn't process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unicode codepoint attributes were used \ninstead of the specified Unicode 3.2.0. This behavior would cause \nmismatches when processing domain names using IDNA 2003 (the \"idna\" \ncodec) and the in_table_b2() function of the \"stringprep\" module. This \nonly affects domain names containing characters that were not previously\n registered or had their Unicode attributes such as case-folding \nbehavior updated since Unicode 3.2.0."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-17084","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-17084","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-17084","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-17084","date":"2026-11-09","epss":0.00734,"percentile":0.54682}],"risk":0.367,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-17084"},"relatedVulnerabilities":[{"id":"CVE-2026-17084","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-17084","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-17084","date":"2026-11-09","epss":0.00734,"percentile":0.54682}],"urls":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","http://www.openwall.com/lists/oss-security/2026/08/18/2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-17084","description":"The \"stringprep\" module didn't process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unicode codepoint attributes were used \ninstead of the specified Unicode 3.2.0. This behavior would cause \nmismatches when processing domain names using IDNA 2003 (the \"idna\" \ncodec) and the in_table_b2() function of the \"stringprep\" module. This \nonly affects domain names containing characters that were not previously\n registered or had their Unicode attributes such as case-folding \nbehavior updated since Unicode 3.2.0."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-17084","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-17084","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-17084","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-17084","date":"2026-11-09","epss":0.00734,"percentile":0.54682}],"risk":0.367,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-17084"},"relatedVulnerabilities":[{"id":"CVE-2026-17084","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-17084","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-17084","date":"2026-11-09","epss":0.00734,"percentile":0.54682}],"urls":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","http://www.openwall.com/lists/oss-security/2026/08/18/2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-17084","description":"The \"stringprep\" module didn't process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unicode codepoint attributes were used \ninstead of the specified Unicode 3.2.0. This behavior would cause \nmismatches when processing domain names using IDNA 2003 (the \"idna\" \ncodec) and the in_table_b2() function of the \"stringprep\" module. This \nonly affects domain names containing characters that were not previously\n registered or had their Unicode attributes such as case-folding \nbehavior updated since Unicode 3.2.0."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-17084","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-17084","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-17084","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-17084","date":"2026-11-09","epss":0.00734,"percentile":0.54682}],"risk":0.367,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-17084"},"relatedVulnerabilities":[{"id":"CVE-2026-17084","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-17084","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-17084","date":"2026-11-09","epss":0.00734,"percentile":0.54682}],"urls":["https://github.com/python/cpython/commit/1e54caa096678a38afcabecabb1ff72400dd6bae","https://github.com/python/cpython/commit/5181304bcec9cfc3c15311741c9154cdff2e3fd7","https://github.com/python/cpython/commit/69f92ebaec681e9149dfd70fd02d4ed52d2a6296","https://github.com/python/cpython/commit/7e109d084d55e7eb25837a5f3b47ef9beee547bc","https://github.com/python/cpython/commit/c016c2535b74227fddf2cf7334dbfead6c930214","https://github.com/python/cpython/commit/c28b121a4f0b975937c8b5a1b4934bb361d84296","https://github.com/python/cpython/commit/c42790b34f634051750e5da340d17c7da19e4784","https://github.com/python/cpython/commit/d397a4979cfc80a8cd6c73838aa10e9c8cf5ef72","https://github.com/python/cpython/issues/155292","https://github.com/python/cpython/pull/155293","https://mail.python.org/archives/list/security-announce@python.org/thread/EUHHTC6EV7HCLSUHP25C5VHSV4V2MUZN/","http://www.openwall.com/lists/oss-security/2026/08/18/2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-17084","description":"The \"stringprep\" module didn't process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unicode codepoint attributes were used \ninstead of the specified Unicode 3.2.0. This behavior would cause \nmismatches when processing domain names using IDNA 2003 (the \"idna\" \ncodec) and the in_table_b2() function of the \"stringprep\" module. This \nonly affects domain names containing characters that were not previously\n registered or had their Unicode attributes such as case-folding \nbehavior updated since Unicode 3.2.0."}]},{"artifact":{"id":"60af6de63c33b882","cpes":["cpe:2.3:a:python3-pip-whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*"],"name":"python3-pip-whl","purl":"pkg:deb/ubuntu/python3-pip-whl@25.1.1%2Bdfsg-1ubuntu2?arch=all&distro=ubuntu-26.04&upstream=python-pip","type":"deb","version":"25.1.1+dfsg-1ubuntu2","language":"","licenses":["Apache-2.0","BSD-2","BSD-3","Expat","ISC","MPL-2","MPL-2.0","Python"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-pip-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-pip-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.list"}],"upstreams":[{"name":"python-pip"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-66418","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python-pip","version":"25.1.1+dfsg-1ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-66418","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-66418","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-66418","date":"2026-11-09","epss":0.00731,"percentile":0.54564}],"risk":0.3655,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-66418"},"relatedVulnerabilities":[{"id":"CVE-2025-66418","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66418","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-66418","date":"2026-11-09","epss":0.00731,"percentile":0.54564}],"urls":["https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8","https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-66418","description":"urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0."}]},{"artifact":{"id":"60af6de63c33b882","cpes":["cpe:2.3:a:python3-pip-whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*"],"name":"python3-pip-whl","purl":"pkg:deb/ubuntu/python3-pip-whl@25.1.1%2Bdfsg-1ubuntu2?arch=all&distro=ubuntu-26.04&upstream=python-pip","type":"deb","version":"25.1.1+dfsg-1ubuntu2","language":"","licenses":["Apache-2.0","BSD-2","BSD-3","Expat","ISC","MPL-2","MPL-2.0","Python"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-pip-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-pip-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.list"}],"upstreams":[{"name":"python-pip"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-66471","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python-pip","version":"25.1.1+dfsg-1ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-66471","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-66471","cwe":"CWE-409","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-66471","date":"2026-11-09","epss":0.00731,"percentile":0.54564}],"risk":0.3655,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-66471"},"relatedVulnerabilities":[{"id":"CVE-2025-66471","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66471","cwe":"CWE-409","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-66471","date":"2026-11-09","epss":0.00731,"percentile":0.54564}],"urls":["https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7","https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-66471","description":"urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64834","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-11-09","epss":0.00727,"percentile":0.54426}],"risk":0.36350000000000005,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64834"},"relatedVulnerabilities":[{"id":"CVE-2026-64834","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-11-09","epss":0.00727,"percentile":0.54426}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64834","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-11-09","epss":0.00727,"percentile":0.54426}],"risk":0.36350000000000005,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64834"},"relatedVulnerabilities":[{"id":"CVE-2026-64834","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-11-09","epss":0.00727,"percentile":0.54426}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64834","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64834","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-11-09","epss":0.00727,"percentile":0.54426}],"risk":0.36350000000000005,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64834"},"relatedVulnerabilities":[{"id":"CVE-2026-64834","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64834","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64834","date":"2026-11-09","epss":0.00727,"percentile":0.54426}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663","https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64834","description":"FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users."}]},{"artifact":{"id":"8f06f0937ca78bd2","cpes":["cpe:2.3:a:libimlib2t64:libimlib2t64:1.12.6-1:*:*:*:*:*:*:*"],"name":"libimlib2t64","purl":"pkg:deb/ubuntu/libimlib2t64@1.12.6-1?arch=amd64&distro=ubuntu-26.04&upstream=imlib2","type":"deb","version":"1.12.6-1","language":"","licenses":["imlib2-license"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libimlib2t64/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libimlib2t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libimlib2t64:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libimlib2t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imlib2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-25448","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"imlib2","version":"1.12.6-1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2024-25448","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2024-25448","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-25448","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-25448","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-25448","date":"2026-11-09","epss":0.00716,"percentile":0.54052}],"risk":0.358,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-25448"},"relatedVulnerabilities":[{"id":"CVE-2024-25448","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-25448","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-25448","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-25448","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-25448","date":"2026-11-09","epss":0.00716,"percentile":0.54052}],"urls":["https://git.enlightenment.org/old/legacy-imlib2/issues/20","https://github.com/derf/feh/issues/711"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-25448","description":"An issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11972","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-11972","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-11-09","epss":0.00715,"percentile":0.54024}],"risk":0.3575,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11972"},"relatedVulnerabilities":[{"id":"CVE-2026-11972","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-11-09","epss":0.00715,"percentile":0.54024}],"urls":["https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9","https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365","https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21","https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec","https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192","https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896","https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438","https://github.com/python/cpython/issues/151981","https://github.com/python/cpython/pull/151982","https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11972","description":"When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11972","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-11972","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-11-09","epss":0.00715,"percentile":0.54024}],"risk":0.3575,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11972"},"relatedVulnerabilities":[{"id":"CVE-2026-11972","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-11-09","epss":0.00715,"percentile":0.54024}],"urls":["https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9","https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365","https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21","https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec","https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192","https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896","https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438","https://github.com/python/cpython/issues/151981","https://github.com/python/cpython/pull/151982","https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11972","description":"When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-11972","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-11972","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-11-09","epss":0.00715,"percentile":0.54024}],"risk":0.3575,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11972"},"relatedVulnerabilities":[{"id":"CVE-2026-11972","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-11-09","epss":0.00715,"percentile":0.54024}],"urls":["https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9","https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365","https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21","https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec","https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192","https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896","https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438","https://github.com/python/cpython/issues/151981","https://github.com/python/cpython/pull/151982","https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11972","description":"When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11972","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-11972","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-11-09","epss":0.00715,"percentile":0.54024}],"risk":0.3575,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11972"},"relatedVulnerabilities":[{"id":"CVE-2026-11972","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-11-09","epss":0.00715,"percentile":0.54024}],"urls":["https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9","https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365","https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21","https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec","https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192","https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896","https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438","https://github.com/python/cpython/issues/151981","https://github.com/python/cpython/pull/151982","https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11972","description":"When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11972","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-11972","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-11-09","epss":0.00715,"percentile":0.54024}],"risk":0.3575,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11972"},"relatedVulnerabilities":[{"id":"CVE-2026-11972","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-11-09","epss":0.00715,"percentile":0.54024}],"urls":["https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9","https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365","https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21","https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec","https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192","https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896","https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438","https://github.com/python/cpython/issues/151981","https://github.com/python/cpython/pull/151982","https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11972","description":"When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer."}]},{"artifact":{"id":"1abf88877baea6e9","cpes":["cpe:2.3:a:libgstreamer-plugins-base1.0-0:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer-plugins-base1.0-0:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer_plugins_base1.0_0:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer_plugins_base1.0_0:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer-plugins-base1.0:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer-plugins-base1.0:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer_plugins_base1.0:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer_plugins_base1.0:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer-plugins:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer-plugins:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer_plugins:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer_plugins:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*"],"name":"libgstreamer-plugins-base1.0-0","purl":"pkg:deb/ubuntu/libgstreamer-plugins-base1.0-0@1.28.2-1ubuntu0.1?arch=amd64&distro=ubuntu-26.04&upstream=gst-plugins-base1.0","type":"deb","version":"1.28.2-1ubuntu0.1","language":"","licenses":["BSD-3-clause","CC-BY-SA-4.0","GPL-2","GPL-2+","LGPL","LGPL-2+","LGPL-2.1","LGPL-2.1+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgstreamer-plugins-base1.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libgstreamer-plugins-base1.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgstreamer-plugins-base1.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libgstreamer-plugins-base1.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gst-plugins-base1.0"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-111183","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gst-plugins-base1.0","version":"1.28.2-1ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-111183","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-111183","cwe":"CWE-122","type":"Secondary","source":"zdi-disclosures@trendmicro.com"}],"epss":[{"cve":"CVE-2026-111183","date":"2026-11-09","epss":0.00704,"percentile":0.53591}],"risk":0.35200000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-111183"},"relatedVulnerabilities":[{"id":"CVE-2026-111183","cvss":[{"type":"Secondary","source":"zdi-disclosures@trendmicro.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111183","cwe":"CWE-122","type":"Secondary","source":"zdi-disclosures@trendmicro.com"}],"epss":[{"cve":"CVE-2026-111183","date":"2026-11-09","epss":0.00704,"percentile":0.53591}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/80c184b4c5ee8ba28b2540ba58f40b8d44b61622","https://www.zerodayinitiative.com/advisories/ZDI-26-775/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-111183","description":"GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the processing of RTP payload elements. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-31143."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75143","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-75143","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-75143","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75143","date":"2026-11-09","epss":0.00702,"percentile":0.53538}],"risk":0.35100000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-75143"},"relatedVulnerabilities":[{"id":"CVE-2026-75143","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75143","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75143","date":"2026-11-09","epss":0.00702,"percentile":0.53538}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75143","description":"FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination size. This is reachable via the async:rist:// URL scheme, where the async wrapper supplies a smaller buffer than the received payload. A remote RIST sender can trigger the overflow by sending a packet whose payload exceeds the caller buffer size."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75143","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-75143","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-75143","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75143","date":"2026-11-09","epss":0.00702,"percentile":0.53538}],"risk":0.35100000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-75143"},"relatedVulnerabilities":[{"id":"CVE-2026-75143","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75143","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75143","date":"2026-11-09","epss":0.00702,"percentile":0.53538}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75143","description":"FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination size. This is reachable via the async:rist:// URL scheme, where the async wrapper supplies a smaller buffer than the received payload. A remote RIST sender can trigger the overflow by sending a packet whose payload exceeds the caller buffer size."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75143","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-75143","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-75143","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75143","date":"2026-11-09","epss":0.00702,"percentile":0.53538}],"risk":0.35100000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-75143"},"relatedVulnerabilities":[{"id":"CVE-2026-75143","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75143","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75143","date":"2026-11-09","epss":0.00702,"percentile":0.53538}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75143","description":"FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination size. This is reachable via the async:rist:// URL scheme, where the async wrapper supplies a smaller buffer than the received payload. A remote RIST sender can trigger the overflow by sending a packet whose payload exceeds the caller buffer size."}]},{"artifact":{"id":"60af6de63c33b882","cpes":["cpe:2.3:a:python3-pip-whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*"],"name":"python3-pip-whl","purl":"pkg:deb/ubuntu/python3-pip-whl@25.1.1%2Bdfsg-1ubuntu2?arch=all&distro=ubuntu-26.04&upstream=python-pip","type":"deb","version":"25.1.1+dfsg-1ubuntu2","language":"","licenses":["Apache-2.0","BSD-2","BSD-3","Expat","ISC","MPL-2","MPL-2.0","Python"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-pip-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-pip-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.list"}],"upstreams":[{"name":"python-pip"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-44432","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python-pip","version":"25.1.1+dfsg-1ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-44432","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-44432","cwe":"CWE-409","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-44432","cwe":"CWE-409","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-44432","date":"2026-11-09","epss":0.0068,"percentile":0.5266}],"risk":0.33999999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-44432"},"relatedVulnerabilities":[{"id":"CVE-2026-44432","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-44432","cwe":"CWE-409","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-44432","cwe":"CWE-409","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-44432","date":"2026-11-09","epss":0.0068,"percentile":0.5266}],"urls":["https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j","https://access.redhat.com/errata/RHSA-2026:15862","https://access.redhat.com/errata/RHSA-2026:20338","https://access.redhat.com/errata/RHSA-2026:22934","https://access.redhat.com/errata/RHSA-2026:24000","https://access.redhat.com/errata/RHSA-2026:24009","https://access.redhat.com/errata/RHSA-2026:24014","https://access.redhat.com/errata/RHSA-2026:24069","https://access.redhat.com/errata/RHSA-2026:24374","https://access.redhat.com/errata/RHSA-2026:24476","https://access.redhat.com/errata/RHSA-2026:24483","https://access.redhat.com/errata/RHSA-2026:24540","https://access.redhat.com/errata/RHSA-2026:24541","https://access.redhat.com/errata/RHSA-2026:24542","https://access.redhat.com/errata/RHSA-2026:24544","https://access.redhat.com/errata/RHSA-2026:25039","https://access.redhat.com/errata/RHSA-2026:25143","https://access.redhat.com/errata/RHSA-2026:25928","https://access.redhat.com/errata/RHSA-2026:26212","https://access.redhat.com/errata/RHSA-2026:26304","https://access.redhat.com/errata/RHSA-2026:27929","https://access.redhat.com/errata/RHSA-2026:28000","https://access.redhat.com/errata/RHSA-2026:28157","https://access.redhat.com/errata/RHSA-2026:28158","https://access.redhat.com/errata/RHSA-2026:28159","https://access.redhat.com/errata/RHSA-2026:28571","https://access.redhat.com/errata/RHSA-2026:30076","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:32992","https://access.redhat.com/errata/RHSA-2026:33313","https://access.redhat.com/errata/RHSA-2026:33683","https://access.redhat.com/errata/RHSA-2026:34160","https://access.redhat.com/errata/RHSA-2026:34374","https://access.redhat.com/errata/RHSA-2026:34526","https://access.redhat.com/errata/RHSA-2026:34531","https://access.redhat.com/errata/RHSA-2026:34533","https://access.redhat.com/errata/RHSA-2026:34607","https://access.redhat.com/errata/RHSA-2026:36350","https://access.redhat.com/errata/RHSA-2026:37275","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:42078","https://access.redhat.com/errata/RHSA-2026:42079","https://access.redhat.com/errata/RHSA-2026:42132","https://access.redhat.com/errata/RHSA-2026:42144","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:44481","https://access.redhat.com/errata/RHSA-2026:51206","https://access.redhat.com/errata/RHSA-2026:56347","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59409","https://access.redhat.com/errata/RHSA-2026:60362","https://access.redhat.com/errata/RHSA-2026:60371","https://access.redhat.com/errata/RHSA-2026:7625","https://access.redhat.com/errata/RHSA-2026:7634","https://access.redhat.com/security/cve/CVE-2026-44432","https://bugzilla.redhat.com/show_bug.cgi?id=2477154","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44432.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-44432","description":"urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) call when the response was decompressed using the official Brotli library or (2) when HTTPResponse.drain_conn() was called after the response had been read and decompressed partially (compression algorithm did not matter here). These issues could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This could result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data) on the client side. This vulnerability is fixed in 2.7.0."}]},{"artifact":{"id":"504ef2bce88b9f7c","cpes":["cpe:2.3:a:x11vnc:x11vnc:0.9.17-2:*:*:*:*:*:*:*"],"name":"x11vnc","purl":"pkg:deb/ubuntu/x11vnc@0.9.17-2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"0.9.17-2","language":"","licenses":["GPL-2","GPL-2.0+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/x11vnc/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/x11vnc/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/x11vnc.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/x11vnc.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/x11vnc.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/x11vnc.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-29260","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"x11vnc","version":"0.9.17-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2020-29260","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-29260","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-29260","date":"2026-11-09","epss":0.01131,"percentile":0.66646}],"risk":0.33930000000000005,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-29260"},"relatedVulnerabilities":[{"id":"CVE-2020-29260","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-29260","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-29260","date":"2026-11-09","epss":0.01131,"percentile":0.66646}],"urls":["https://github.com/LibVNC/libvncserver/commit/bef41f6ec4097a8ee094f90a1b34a708fbd757ec","https://lists.debian.org/debian-lts-announce/2022/09/msg00035.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-29260","description":"libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup()."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-25467","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-25467","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-25467","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25467","date":"2026-11-09","epss":0.00672,"percentile":0.52362}],"risk":0.336,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-25467"},"relatedVulnerabilities":[{"id":"CVE-2025-25467","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-25467","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25467","date":"2026-11-09","epss":0.00672,"percentile":0.52362}],"urls":["https://code.videolan.org/videolan/x264/-/issues/75"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-25467","description":"Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-25467","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-25467","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-25467","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25467","date":"2026-11-09","epss":0.00672,"percentile":0.52362}],"risk":0.336,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-25467"},"relatedVulnerabilities":[{"id":"CVE-2025-25467","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-25467","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25467","date":"2026-11-09","epss":0.00672,"percentile":0.52362}],"urls":["https://code.videolan.org/videolan/x264/-/issues/75"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-25467","description":"Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-25467","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-25467","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-25467","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25467","date":"2026-11-09","epss":0.00672,"percentile":0.52362}],"risk":0.336,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-25467"},"relatedVulnerabilities":[{"id":"CVE-2025-25467","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-25467","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25467","date":"2026-11-09","epss":0.00672,"percentile":0.52362}],"urls":["https://code.videolan.org/videolan/x264/-/issues/75"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-25467","description":"Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file."}]},{"artifact":{"id":"cc1e286ec55b05ed","cpes":["cpe:2.3:a:libx264-165:libx264-165:2\\:0.165.3222\\+gitb35605ac-3build1:*:*:*:*:*:*:*","cpe:2.3:a:libx264-165:libx264_165:2\\:0.165.3222\\+gitb35605ac-3build1:*:*:*:*:*:*:*","cpe:2.3:a:libx264_165:libx264-165:2\\:0.165.3222\\+gitb35605ac-3build1:*:*:*:*:*:*:*","cpe:2.3:a:libx264_165:libx264_165:2\\:0.165.3222\\+gitb35605ac-3build1:*:*:*:*:*:*:*","cpe:2.3:a:libx264:libx264-165:2\\:0.165.3222\\+gitb35605ac-3build1:*:*:*:*:*:*:*","cpe:2.3:a:libx264:libx264_165:2\\:0.165.3222\\+gitb35605ac-3build1:*:*:*:*:*:*:*"],"name":"libx264-165","purl":"pkg:deb/ubuntu/libx264-165@2%3A0.165.3222%2Bgitb35605ac-3build1?arch=amd64&distro=ubuntu-26.04&upstream=x264","type":"deb","version":"2:0.165.3222+gitb35605ac-3build1","language":"","licenses":["BSD-3-clause","Expat","GPL-2","GPL-2+","ISC","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libx264-165/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libx264-165/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libx264-165:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libx264-165:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"x264"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-25467","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"x264","version":"2:0.165.3222+gitb35605ac-3build1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-25467","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-25467","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25467","date":"2026-11-09","epss":0.00672,"percentile":0.52362}],"risk":0.336,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-25467"},"relatedVulnerabilities":[{"id":"CVE-2025-25467","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-25467","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25467","date":"2026-11-09","epss":0.00672,"percentile":0.52362}],"urls":["https://code.videolan.org/videolan/x264/-/issues/75"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-25467","description":"Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7210","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-7210","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-11-09","epss":0.00672,"percentile":0.52329}],"risk":0.336,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-7210"},"relatedVulnerabilities":[{"id":"CVE-2026-7210","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-11-09","epss":0.00672,"percentile":0.52329}],"urls":["https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4","https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566","https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56","https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b","https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286","https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a","https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f","https://github.com/python/cpython/issues/149018","https://github.com/python/cpython/pull/149023","https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/","http://www.openwall.com/lists/oss-security/2026/05/11/13","http://www.openwall.com/lists/oss-security/2026/05/11/8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","description":"`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7210","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-7210","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-11-09","epss":0.00672,"percentile":0.52329}],"risk":0.336,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-7210"},"relatedVulnerabilities":[{"id":"CVE-2026-7210","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-11-09","epss":0.00672,"percentile":0.52329}],"urls":["https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4","https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566","https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56","https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b","https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286","https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a","https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f","https://github.com/python/cpython/issues/149018","https://github.com/python/cpython/pull/149023","https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/","http://www.openwall.com/lists/oss-security/2026/05/11/13","http://www.openwall.com/lists/oss-security/2026/05/11/8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","description":"`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-7210","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-7210","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-11-09","epss":0.00672,"percentile":0.52329}],"risk":0.336,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-7210"},"relatedVulnerabilities":[{"id":"CVE-2026-7210","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-11-09","epss":0.00672,"percentile":0.52329}],"urls":["https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4","https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566","https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56","https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b","https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286","https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a","https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f","https://github.com/python/cpython/issues/149018","https://github.com/python/cpython/pull/149023","https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/","http://www.openwall.com/lists/oss-security/2026/05/11/13","http://www.openwall.com/lists/oss-security/2026/05/11/8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","description":"`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7210","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-7210","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-11-09","epss":0.00672,"percentile":0.52329}],"risk":0.336,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-7210"},"relatedVulnerabilities":[{"id":"CVE-2026-7210","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-11-09","epss":0.00672,"percentile":0.52329}],"urls":["https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4","https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566","https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56","https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b","https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286","https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a","https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f","https://github.com/python/cpython/issues/149018","https://github.com/python/cpython/pull/149023","https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/","http://www.openwall.com/lists/oss-security/2026/05/11/13","http://www.openwall.com/lists/oss-security/2026/05/11/8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","description":"`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7210","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-7210","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-11-09","epss":0.00672,"percentile":0.52329}],"risk":0.336,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-7210"},"relatedVulnerabilities":[{"id":"CVE-2026-7210","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-11-09","epss":0.00672,"percentile":0.52329}],"urls":["https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4","https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566","https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56","https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b","https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286","https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a","https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f","https://github.com/python/cpython/issues/149018","https://github.com/python/cpython/pull/149023","https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/","http://www.openwall.com/lists/oss-security/2026/05/11/13","http://www.openwall.com/lists/oss-security/2026/05/11/8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","description":"`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch."}]},{"artifact":{"id":"8f06f0937ca78bd2","cpes":["cpe:2.3:a:libimlib2t64:libimlib2t64:1.12.6-1:*:*:*:*:*:*:*"],"name":"libimlib2t64","purl":"pkg:deb/ubuntu/libimlib2t64@1.12.6-1?arch=amd64&distro=ubuntu-26.04&upstream=imlib2","type":"deb","version":"1.12.6-1","language":"","licenses":["imlib2-license"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libimlib2t64/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libimlib2t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libimlib2t64:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libimlib2t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imlib2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-25450","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"imlib2","version":"1.12.6-1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2024-25450","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2024-25450","cwe":"CWE-401","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-25450","date":"2026-11-09","epss":0.00659,"percentile":0.51813}],"risk":0.3295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-25450"},"relatedVulnerabilities":[{"id":"CVE-2024-25450","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-25450","cwe":"CWE-401","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-25450","date":"2026-11-09","epss":0.00659,"percentile":0.51813}],"urls":["https://git.enlightenment.org/old/legacy-imlib2/issues/20","https://github.com/derf/feh/issues/712"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-25450","description":"imlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts()."}]},{"artifact":{"id":"164b170cdee0b5fb","cpes":["cpe:2.3:a:libsndfile1:libsndfile1:1.2.2-4:*:*:*:*:*:*:*"],"name":"libsndfile1","purl":"pkg:deb/ubuntu/libsndfile1@1.2.2-4?arch=amd64&distro=ubuntu-26.04&upstream=libsndfile","type":"deb","version":"1.2.2-4","language":"","licenses":["Apache-2.0","BSD-2-clause","BSD-3-clause","FSFAP","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","NTP","gsm","sun"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsndfile1/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/libsndfile1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsndfile1:amd64.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/libsndfile1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsndfile"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-52194","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsndfile","version":"1.2.2-4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-52194","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-52194","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-52194","date":"2026-11-09","epss":0.00653,"percentile":0.51584}],"risk":0.3265,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-52194"},"relatedVulnerabilities":[{"id":"CVE-2025-52194","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52194","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-52194","date":"2026-11-09","epss":0.00653,"percentile":0.51584}],"urls":["https://bushido-sec.com/index.php/2025/08/08/libsndfile-buffer-overflow/","https://github.com/libsndfile","https://github.com/libsndfile/libsndfile/issues/1082"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-52194","description":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution."}]},{"artifact":{"id":"13b5abe8d304965b","cpes":["cpe:2.3:a:libtdb1:libtdb1:2\\:1.4.14\\+samba4.23.6\\+dfsg-1ubuntu2.2:*:*:*:*:*:*:*"],"name":"libtdb1","purl":"pkg:deb/ubuntu/libtdb1@2%3A1.4.14%2Bsamba4.23.6%2Bdfsg-1ubuntu2.2?arch=amd64&distro=ubuntu-26.04&upstream=samba%402%3A4.23.6%2Bdfsg-1ubuntu2.2","type":"deb","version":"2:1.4.14+samba4.23.6+dfsg-1ubuntu2.2","language":"","licenses":["BSD-3","GPL-3","GPL-3.0+","ISC","LGPL-3","LGPL-3.0+","MS-ADSL","PostgreSQL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtdb1/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libtdb1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtdb1:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libtdb1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"samba","version":"2:4.23.6+dfsg-1ubuntu2.2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-109411","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"samba","version":"2:4.23.6+dfsg-1ubuntu2.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-109411","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-109411","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-109411","date":"2026-11-09","epss":0.00649,"percentile":0.51417}],"risk":0.3245,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-109411"},"relatedVulnerabilities":[{"id":"CVE-2026-109411","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-109411","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-109411","date":"2026-11-09","epss":0.00649,"percentile":0.51417}],"urls":["https://access.redhat.com/security/cve/CVE-2026-109411","https://attachments.samba.org/attachment.cgi?id=19294","https://attachments.samba.org/attachment.cgi?id=19295","https://bugzilla.redhat.com/show_bug.cgi?id=2552136","https://bugzilla.samba.org/show_bug.cgi?id=16276"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-109411","description":"An access control bypass flaw was identified in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs_ceph_rgw module. When a client requests an existing file using mismatched character casing, the module fails to perform a case-insensitive lookup correctly, causing the server to treat the operation as creating a new file. As a result, the server skips standard permission checks on the existing file, allowing the attacker to access or overwrite sensitive data owned by other users."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64830","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-11-09","epss":0.00646,"percentile":0.51253}],"risk":0.32299999999999995,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64830"},"relatedVulnerabilities":[{"id":"CVE-2026-64830","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-11-09","epss":0.00646,"percentile":0.51253}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64830","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-11-09","epss":0.00646,"percentile":0.51253}],"risk":0.32299999999999995,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64830"},"relatedVulnerabilities":[{"id":"CVE-2026-64830","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-11-09","epss":0.00646,"percentile":0.51253}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64830","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64830","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-11-09","epss":0.00646,"percentile":0.51253}],"risk":0.32299999999999995,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64830"},"relatedVulnerabilities":[{"id":"CVE-2026-64830","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64830","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64830","date":"2026-11-09","epss":0.00646,"percentile":0.51253}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657","https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64830","description":"FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub->q[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer."}]},{"artifact":{"id":"cd714f2b10ca1a58","cpes":["cpe:2.3:a:perl-base:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.40.1-7ubuntu0.3?arch=amd64&distro=ubuntu-26.04&upstream=perl","type":"deb","version":"5.40.1-7ubuntu0.3","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","FSFAP","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","LGPL-2.1","REGCOMP","REGCOMP,","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/perl-base.list"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-82560","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"perl","version":"5.40.1-7ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-82560","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-11-09","epss":0.0063,"percentile":0.50465}],"risk":0.315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-82560"},"relatedVulnerabilities":[{"id":"CVE-2026-82560","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-11-09","epss":0.0063,"percentile":0.50465}],"urls":["https://github.com/rra/podlators/commit/70510174f69eb54aa6d617bde4e1402cd9b7c61f.patch","https://metacpan.org/release/RRA/podlators-v6.1.0/source/lib/Pod/Text.pm#L245-261","https://metacpan.org/release/RRA/podlators-v6.1.1/changes","http://www.openwall.com/lists/oss-security/2026/09/19/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82560","description":"Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.\n\nEach =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.\n\nFormatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted."}]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15712","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15712","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15712","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15712","date":"2026-11-09","epss":0.00629,"percentile":0.50454}],"risk":0.3145,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15712"},"relatedVulnerabilities":[{"id":"CVE-2026-15712","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15712","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15712","date":"2026-11-09","epss":0.00629,"percentile":0.50454}],"urls":["https://access.redhat.com/security/cve/CVE-2026-15712","https://bugzilla.redhat.com/show_bug.cgi?id=2499939","https://gitlab.gnome.org/GNOME/libsoup/-/work_items/540"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15712","description":"A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOAWAY frame, it improperly handles the \"Additional Debug Data\" payload by assuming the data stream is a safely NUL-terminated C-string. Because the parser lacks strict length-boundary verification before reading this data, a remote, unauthenticated attacker can intentionally send a malformed GOAWAY frame missing the appropriate null delimiter. This causes the library to read past the end of the allocated buffer, triggering an application crash that results in a denial of service (DoS), or potentially exposing fragments of memory contents."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15712","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15712","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15712","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15712","date":"2026-11-09","epss":0.00629,"percentile":0.50454}],"risk":0.3145,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15712"},"relatedVulnerabilities":[{"id":"CVE-2026-15712","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15712","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15712","date":"2026-11-09","epss":0.00629,"percentile":0.50454}],"urls":["https://access.redhat.com/security/cve/CVE-2026-15712","https://bugzilla.redhat.com/show_bug.cgi?id=2499939","https://gitlab.gnome.org/GNOME/libsoup/-/work_items/540"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15712","description":"A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOAWAY frame, it improperly handles the \"Additional Debug Data\" payload by assuming the data stream is a safely NUL-terminated C-string. Because the parser lacks strict length-boundary verification before reading this data, a remote, unauthenticated attacker can intentionally send a malformed GOAWAY frame missing the appropriate null delimiter. This causes the library to read past the end of the allocated buffer, triggering an application crash that results in a denial of service (DoS), or potentially exposing fragments of memory contents."}]},{"artifact":{"id":"d3b00fd0e49feb60","cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:generic/curl@8.22.0","type":"binary","version":"8.22.0","language":"","licenses":[],"locations":[{"path":"/usr/bin/curl","layerID":"sha256:5641d78308224c32427977793ca06f872ead0dc428bdedb8e45cdf7d3cd98979","accessPath":"/usr/bin/curl","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-86415","versionConstraint":">= 8.21.0, < 8.23.0 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:haxx:curl:8.22.0:*:*:*:*:*:*:*"],"package":{"name":"curl","version":"8.22.0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-86415","fix":{"state":"fixed","versions":["8.23.0"],"available":[{"date":"2026-10-28","kind":"first-observed","version":"8.23.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86415","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86415","date":"2026-11-09","epss":0.00419,"percentile":0.36532}],"risk":0.31425000000000003,"urls":["https://curl.se/docs/CVE-2026-86415.html","https://curl.se/docs/CVE-2026-86415.json","https://hackerone.com/reports/3993870"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86415","description":"libcurl's connection cache match function never considers the automatic client\ncertificate option, so a cached, already authenticated Schannel connection can\nbe handed to a transfer that got redirected to a different origin, even though\nthe code explicitly switched off the auto client cert option for that transfer\nto prevent exactly this."},"relatedVulnerabilities":[]},{"artifact":{"id":"6329b15306fe2f35","cpes":["cpe:2.3:a:golang:networking:v0.60.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.60.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.60.0","type":"go-module","version":"v0.60.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU=","mainModule":"github.com/rclone/rclone","architecture":"amd64","goCompiledVersion":"go1.27.2"},"locations":[{"path":"/usr/local/bin/rclone","layerID":"sha256:3ed598c74c07812030a840a2539a9482d9349f27ad19f7eaa640cf48328499d6","accessPath":"/usr/local/bin/rclone","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.62.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6860","versionConstraint":"<0.62.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.60.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6860","fix":{"state":"fixed","versions":["0.62.0"],"available":[{"date":"2026-10-27","kind":"release","version":"0.62.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78661","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78661","date":"2026-11-09","epss":0.00409,"percentile":0.3543}],"risk":0.30674999999999997,"urls":["https://go.dev/issue/82224","https://groups.google.com/g/golang-announce/c/sqrs2vTx_Xs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/849365","description":"When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a</x>\") caused O(n^2) allocations and byte copies.\n\nAccumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse."},"relatedVulnerabilities":[{"id":"CVE-2026-78661","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78661","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78661","date":"2026-11-09","epss":0.00409,"percentile":0.3543}],"urls":["https://go.dev/cl/849365","https://go.dev/issue/82224","https://groups.google.com/g/golang-announce/c/sqrs2vTx_Xs","https://pkg.go.dev/vuln/GO-2026-6860"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78661","description":"When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a</x>\") caused O(n^2) allocations and byte copies. Accumulate coalesced text in per-node byte slices during parsing and materialize Data strings once at the end of parse."}]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0719","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-0719","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-0719","cwe":"CWE-121","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-0719","cwe":"CWE-121","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-0719","date":"2026-11-09","epss":0.0061,"percentile":0.49496}],"risk":0.305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0719"},"relatedVulnerabilities":[{"id":"CVE-2026-0719","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0719","cwe":"CWE-121","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-0719","cwe":"CWE-121","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-0719","date":"2026-11-09","epss":0.0061,"percentile":0.49496}],"urls":["https://access.redhat.com/errata/RHSA-2026:1948","https://access.redhat.com/errata/RHSA-2026:2005","https://access.redhat.com/errata/RHSA-2026:2006","https://access.redhat.com/errata/RHSA-2026:2007","https://access.redhat.com/errata/RHSA-2026:2008","https://access.redhat.com/errata/RHSA-2026:2049","https://access.redhat.com/errata/RHSA-2026:2182","https://access.redhat.com/errata/RHSA-2026:2214","https://access.redhat.com/errata/RHSA-2026:2215","https://access.redhat.com/errata/RHSA-2026:2216","https://access.redhat.com/errata/RHSA-2026:2396","https://access.redhat.com/errata/RHSA-2026:2402","https://access.redhat.com/errata/RHSA-2026:2512","https://access.redhat.com/errata/RHSA-2026:2513","https://access.redhat.com/errata/RHSA-2026:2514","https://access.redhat.com/errata/RHSA-2026:2528","https://access.redhat.com/errata/RHSA-2026:2529","https://access.redhat.com/errata/RHSA-2026:2628","https://access.redhat.com/errata/RHSA-2026:2844","https://access.redhat.com/security/cve/CVE-2026-0719","https://bugzilla.redhat.com/show_bug.cgi?id=2427906","https://gitlab.gnome.org/GNOME/libsoup/-/issues/477","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0719.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0719","description":"A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This results in incorrect memory allocation on the stack, followed by unsafe memory copying. As a result, applications using libsoup may crash unexpectedly, creating a denial-of-service risk."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0719","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-0719","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-0719","cwe":"CWE-121","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-0719","cwe":"CWE-121","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-0719","date":"2026-11-09","epss":0.0061,"percentile":0.49496}],"risk":0.305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0719"},"relatedVulnerabilities":[{"id":"CVE-2026-0719","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0719","cwe":"CWE-121","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-0719","cwe":"CWE-121","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-0719","date":"2026-11-09","epss":0.0061,"percentile":0.49496}],"urls":["https://access.redhat.com/errata/RHSA-2026:1948","https://access.redhat.com/errata/RHSA-2026:2005","https://access.redhat.com/errata/RHSA-2026:2006","https://access.redhat.com/errata/RHSA-2026:2007","https://access.redhat.com/errata/RHSA-2026:2008","https://access.redhat.com/errata/RHSA-2026:2049","https://access.redhat.com/errata/RHSA-2026:2182","https://access.redhat.com/errata/RHSA-2026:2214","https://access.redhat.com/errata/RHSA-2026:2215","https://access.redhat.com/errata/RHSA-2026:2216","https://access.redhat.com/errata/RHSA-2026:2396","https://access.redhat.com/errata/RHSA-2026:2402","https://access.redhat.com/errata/RHSA-2026:2512","https://access.redhat.com/errata/RHSA-2026:2513","https://access.redhat.com/errata/RHSA-2026:2514","https://access.redhat.com/errata/RHSA-2026:2528","https://access.redhat.com/errata/RHSA-2026:2529","https://access.redhat.com/errata/RHSA-2026:2628","https://access.redhat.com/errata/RHSA-2026:2844","https://access.redhat.com/security/cve/CVE-2026-0719","https://bugzilla.redhat.com/show_bug.cgi?id=2427906","https://gitlab.gnome.org/GNOME/libsoup/-/issues/477","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0719.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0719","description":"A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This results in incorrect memory allocation on the stack, followed by unsafe memory copying. As a result, applications using libsoup may crash unexpectedly, creating a denial-of-service risk."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87910","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87910","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87910","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-87910","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-87910","date":"2026-11-09","epss":0.00609,"percentile":0.49471}],"risk":0.3045,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87910"},"relatedVulnerabilities":[{"id":"CVE-2026-87910","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87910","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-87910","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-87910","date":"2026-11-09","epss":0.00609,"percentile":0.49471}],"urls":["https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/pull/157266","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","http://www.openwall.com/lists/oss-security/2026/09/11/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87910","description":"When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87910","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87910","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87910","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-87910","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-87910","date":"2026-11-09","epss":0.00609,"percentile":0.49471}],"risk":0.3045,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87910"},"relatedVulnerabilities":[{"id":"CVE-2026-87910","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87910","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-87910","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-87910","date":"2026-11-09","epss":0.00609,"percentile":0.49471}],"urls":["https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/pull/157266","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","http://www.openwall.com/lists/oss-security/2026/09/11/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87910","description":"When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87910","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87910","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87910","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-87910","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-87910","date":"2026-11-09","epss":0.00609,"percentile":0.49471}],"risk":0.3045,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87910"},"relatedVulnerabilities":[{"id":"CVE-2026-87910","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87910","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-87910","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-87910","date":"2026-11-09","epss":0.00609,"percentile":0.49471}],"urls":["https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/pull/157266","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","http://www.openwall.com/lists/oss-security/2026/09/11/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87910","description":"When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87910","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87910","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87910","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-87910","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-87910","date":"2026-11-09","epss":0.00609,"percentile":0.49471}],"risk":0.3045,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87910"},"relatedVulnerabilities":[{"id":"CVE-2026-87910","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87910","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-87910","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-87910","date":"2026-11-09","epss":0.00609,"percentile":0.49471}],"urls":["https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/pull/157266","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","http://www.openwall.com/lists/oss-security/2026/09/11/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87910","description":"When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87910","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87910","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87910","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-87910","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-87910","date":"2026-11-09","epss":0.00609,"percentile":0.49471}],"risk":0.3045,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87910"},"relatedVulnerabilities":[{"id":"CVE-2026-87910","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87910","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-87910","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-87910","date":"2026-11-09","epss":0.00609,"percentile":0.49471}],"urls":["https://github.com/python/cpython/commit/2eb0c2f1dc71847731b6ab30aebefd058d482a7f","https://github.com/python/cpython/commit/3105a3498aaf681ce128cf5baf83c2e5574267c5","https://github.com/python/cpython/commit/764fd0af8d9e19d3684a58d2e58bf770f0605036","https://github.com/python/cpython/commit/9c17bace90f88dfba6d0e2fe23c8e7ae35f83955","https://github.com/python/cpython/commit/a4919937a4e1e69a0d178909c6f20557eca5d1d0","https://github.com/python/cpython/commit/c1f106d240c4ffcb3608ed0a20e8aba6c865f6d3","https://github.com/python/cpython/commit/d9565e54b1fc6d63c5be9afd58114499128fa57b","https://github.com/python/cpython/commit/fb2f0bbc3b35264f09cc2cb2934b7987527a6bc2","https://github.com/python/cpython/issues/157265","https://github.com/python/cpython/pull/157266","https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/","http://www.openwall.com/lists/oss-security/2026/09/11/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87910","description":"When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was ignored. Instead, the member should be skipped if either call returns None."}]},{"artifact":{"id":"7c2a4c4f2edf104e","cpes":["cpe:2.3:a:libopenjp2-7:libopenjp2-7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7","purl":"pkg:deb/ubuntu/libopenjp2-7@2.5.4-1ubuntu0.1?arch=amd64&distro=ubuntu-26.04&upstream=openjpeg2","type":"deb","version":"2.5.4-1ubuntu0.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libopenjp2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-39329","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjpeg2","version":"2.5.4-1ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2023-39329","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-39329","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39329","date":"2026-11-09","epss":0.00588,"percentile":0.48402}],"risk":0.294,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-39329"},"relatedVulnerabilities":[{"id":"CVE-2023-39329","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39329","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39329","date":"2026-11-09","epss":0.00588,"percentile":0.48402}],"urls":["https://access.redhat.com/errata/RHSA-2026:4128","https://access.redhat.com/security/cve/CVE-2023-39329","https://bugzilla.redhat.com/show_bug.cgi?id=2295816","https://github.com/uclouvain/openjpeg/issues/1474"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39329","description":"A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image file, causing a denial of service."}]},{"artifact":{"id":"4bd1690d797b19ac","cpes":["cpe:2.3:a:libpixman-1-0:libpixman-1-0:0.46.4-1:*:*:*:*:*:*:*","cpe:2.3:a:libpixman-1-0:libpixman_1_0:0.46.4-1:*:*:*:*:*:*:*","cpe:2.3:a:libpixman_1_0:libpixman-1-0:0.46.4-1:*:*:*:*:*:*:*","cpe:2.3:a:libpixman_1_0:libpixman_1_0:0.46.4-1:*:*:*:*:*:*:*","cpe:2.3:a:libpixman-1:libpixman-1-0:0.46.4-1:*:*:*:*:*:*:*","cpe:2.3:a:libpixman-1:libpixman_1_0:0.46.4-1:*:*:*:*:*:*:*","cpe:2.3:a:libpixman_1:libpixman-1-0:0.46.4-1:*:*:*:*:*:*:*","cpe:2.3:a:libpixman_1:libpixman_1_0:0.46.4-1:*:*:*:*:*:*:*","cpe:2.3:a:libpixman:libpixman-1-0:0.46.4-1:*:*:*:*:*:*:*","cpe:2.3:a:libpixman:libpixman_1_0:0.46.4-1:*:*:*:*:*:*:*"],"name":"libpixman-1-0","purl":"pkg:deb/ubuntu/libpixman-1-0@0.46.4-1?arch=amd64&distro=ubuntu-26.04&upstream=pixman","type":"deb","version":"0.46.4-1","language":"","licenses":["Expat"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpixman-1-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libpixman-1-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpixman-1-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libpixman-1-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"pixman"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-37769","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"pixman","version":"0.46.4-1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2023-37769","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-37769","cwe":"CWE-369","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-37769","date":"2026-11-09","epss":0.00586,"percentile":0.48308}],"risk":0.293,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-37769"},"relatedVulnerabilities":[{"id":"CVE-2023-37769","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-37769","cwe":"CWE-369","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-37769","date":"2026-11-09","epss":0.00586,"percentile":0.48308}],"urls":["https://gitlab.freedesktop.org/pixman/pixman/-/issues/76"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-37769","description":"stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixman-combine-float.c."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-90816","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90816","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90816","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90816","date":"2026-11-09","epss":0.0058,"percentile":0.47993}],"risk":0.29,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90816"},"relatedVulnerabilities":[{"id":"CVE-2026-90816","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90816","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90816","date":"2026-11-09","epss":0.0058,"percentile":0.47993}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/64fafd63f0b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21492","https://ffmpeg.org/","https://vuldb.com/cve/CVE-2026-90816","https://vuldb.com/submit/922626","https://vuldb.com/vuln/403318","https://vuldb.com/vuln/403318/cti"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90816","description":"A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument duration/target_duration results in denial of service. The attack is possible to be carried out remotely. Upgrading to version 8.1 and 9.0 is able to mitigate this issue. The patch is named 64fafd63f0b4. Upgrading the affected component is recommended."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-90816","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90816","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90816","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90816","date":"2026-11-09","epss":0.0058,"percentile":0.47993}],"risk":0.29,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90816"},"relatedVulnerabilities":[{"id":"CVE-2026-90816","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90816","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90816","date":"2026-11-09","epss":0.0058,"percentile":0.47993}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/64fafd63f0b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21492","https://ffmpeg.org/","https://vuldb.com/cve/CVE-2026-90816","https://vuldb.com/submit/922626","https://vuldb.com/vuln/403318","https://vuldb.com/vuln/403318/cti"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90816","description":"A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument duration/target_duration results in denial of service. The attack is possible to be carried out remotely. Upgrading to version 8.1 and 9.0 is able to mitigate this issue. The patch is named 64fafd63f0b4. Upgrading the affected component is recommended."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-90816","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90816","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90816","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90816","date":"2026-11-09","epss":0.0058,"percentile":0.47993}],"risk":0.29,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90816"},"relatedVulnerabilities":[{"id":"CVE-2026-90816","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90816","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90816","date":"2026-11-09","epss":0.0058,"percentile":0.47993}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/64fafd63f0b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21492","https://ffmpeg.org/","https://vuldb.com/cve/CVE-2026-90816","https://vuldb.com/submit/922626","https://vuldb.com/vuln/403318","https://vuldb.com/vuln/403318/cti"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90816","description":"A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file libavformat/hlsproto.c of the component Duration Parser. Performing a manipulation of the argument duration/target_duration results in denial of service. The attack is possible to be carried out remotely. Upgrading to version 8.1 and 9.0 is able to mitigate this issue. The patch is named 64fafd63f0b4. Upgrading the affected component is recommended."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-52290","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-52290","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-52290","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-52290","date":"2026-11-09","epss":0.00578,"percentile":0.479}],"risk":0.28900000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-52290"},"relatedVulnerabilities":[{"id":"CVE-2025-52290","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52290","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-52290","date":"2026-11-09","epss":0.00578,"percentile":0.479}],"urls":["https://ffmpeg.org","https://infosec.exchange/@sigdevel/116733488628458667","http://www.openwall.com/lists/oss-security/2026/10/20/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-52290","description":"A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service (DoS) via processing a crafted media file."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-52290","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-52290","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-52290","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-52290","date":"2026-11-09","epss":0.00578,"percentile":0.479}],"risk":0.28900000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-52290"},"relatedVulnerabilities":[{"id":"CVE-2025-52290","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52290","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-52290","date":"2026-11-09","epss":0.00578,"percentile":0.479}],"urls":["https://ffmpeg.org","https://infosec.exchange/@sigdevel/116733488628458667","http://www.openwall.com/lists/oss-security/2026/10/20/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-52290","description":"A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service (DoS) via processing a crafted media file."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-52290","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-52290","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-52290","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-52290","date":"2026-11-09","epss":0.00578,"percentile":0.479}],"risk":0.28900000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-52290"},"relatedVulnerabilities":[{"id":"CVE-2025-52290","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52290","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-52290","date":"2026-11-09","epss":0.00578,"percentile":0.479}],"urls":["https://ffmpeg.org","https://infosec.exchange/@sigdevel/116733488628458667","http://www.openwall.com/lists/oss-security/2026/10/20/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-52290","description":"A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service (DoS) via processing a crafted media file."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-6603","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2023-6603","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-6603","cwe":"CWE-476","type":"Secondary","source":"patrick@puiterwijk.org"},{"cve":"CVE-2023-6603","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6603","date":"2026-11-09","epss":0.00578,"percentile":0.47883}],"risk":0.28900000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-6603"},"relatedVulnerabilities":[{"id":"CVE-2023-6603","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"patrick@puiterwijk.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6603","cwe":"CWE-476","type":"Secondary","source":"patrick@puiterwijk.org"},{"cve":"CVE-2023-6603","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6603","date":"2026-11-09","epss":0.00578,"percentile":0.47883}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2334335"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6603","description":"A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-6603","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2023-6603","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-6603","cwe":"CWE-476","type":"Secondary","source":"patrick@puiterwijk.org"},{"cve":"CVE-2023-6603","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6603","date":"2026-11-09","epss":0.00578,"percentile":0.47883}],"risk":0.28900000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-6603"},"relatedVulnerabilities":[{"id":"CVE-2023-6603","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"patrick@puiterwijk.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6603","cwe":"CWE-476","type":"Secondary","source":"patrick@puiterwijk.org"},{"cve":"CVE-2023-6603","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6603","date":"2026-11-09","epss":0.00578,"percentile":0.47883}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2334335"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6603","description":"A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-6603","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2023-6603","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-6603","cwe":"CWE-476","type":"Secondary","source":"patrick@puiterwijk.org"},{"cve":"CVE-2023-6603","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6603","date":"2026-11-09","epss":0.00578,"percentile":0.47883}],"risk":0.28900000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-6603"},"relatedVulnerabilities":[{"id":"CVE-2023-6603","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"patrick@puiterwijk.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6603","cwe":"CWE-476","type":"Secondary","source":"patrick@puiterwijk.org"},{"cve":"CVE-2023-6603","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6603","date":"2026-11-09","epss":0.00578,"percentile":0.47883}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2334335"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6603","description":"A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization."}]},{"artifact":{"id":"8077d30e416cb101","cpes":["cpe:2.3:a:libtiff6:libtiff6:4.7.0-3ubuntu5:*:*:*:*:*:*:*"],"name":"libtiff6","purl":"pkg:deb/ubuntu/libtiff6@4.7.0-3ubuntu5?arch=amd64&distro=ubuntu-26.04&upstream=tiff","type":"deb","version":"4.7.0-3ubuntu5","language":"","licenses":["Hylafax"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtiff6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libtiff6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtiff6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libtiff6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"tiff"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4775","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"tiff","version":"4.7.0-3ubuntu5"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-4775","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-4775","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-4775","cwe":"CWE-190","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-4775","date":"2026-11-09","epss":0.0057,"percentile":0.47455}],"risk":0.28500000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-4775"},"relatedVulnerabilities":[{"id":"CVE-2026-4775","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4775","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-4775","cwe":"CWE-190","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-4775","date":"2026-11-09","epss":0.0057,"percentile":0.47455}],"urls":["https://access.redhat.com/errata/RHSA-2026:12265","https://access.redhat.com/errata/RHSA-2026:12271","https://access.redhat.com/errata/RHSA-2026:14929","https://access.redhat.com/errata/RHSA-2026:16055","https://access.redhat.com/errata/RHSA-2026:19150","https://access.redhat.com/errata/RHSA-2026:19363","https://access.redhat.com/errata/RHSA-2026:19585","https://access.redhat.com/errata/RHSA-2026:19586","https://access.redhat.com/errata/RHSA-2026:19604","https://access.redhat.com/errata/RHSA-2026:19608","https://access.redhat.com/errata/RHSA-2026:19609","https://access.redhat.com/errata/RHSA-2026:19657","https://access.redhat.com/errata/RHSA-2026:19659","https://access.redhat.com/errata/RHSA-2026:19702","https://access.redhat.com/errata/RHSA-2026:20583","https://access.redhat.com/errata/RHSA-2026:20585","https://access.redhat.com/errata/RHSA-2026:20591","https://access.redhat.com/errata/RHSA-2026:20592","https://access.redhat.com/errata/RHSA-2026:24992","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:25910","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:30349","https://access.redhat.com/errata/RHSA-2026:33388","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-4775","https://bugzilla.redhat.com/show_bug.cgi?id=2450768","https://lists.debian.org/debian-lts-announce/2026/04/msg00016.html","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4775.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4775","description":"A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution."}]},{"artifact":{"id":"cd714f2b10ca1a58","cpes":["cpe:2.3:a:perl-base:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.40.1-7ubuntu0.3?arch=amd64&distro=ubuntu-26.04&upstream=perl","type":"deb","version":"5.40.1-7ubuntu0.3","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","FSFAP","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","LGPL-2.1","REGCOMP","REGCOMP,","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/perl-base.list"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-48959","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"perl","version":"5.40.1-7ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-48959","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-48959","cwe":"CWE-407","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48959","date":"2026-11-09","epss":0.00553,"percentile":0.4649}],"risk":0.2765,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-48959"},"relatedVulnerabilities":[{"id":"CVE-2026-48959","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48959","cwe":"CWE-407","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48959","date":"2026-11-09","epss":0.00553,"percentile":0.4649}],"urls":["https://github.com/pmqs/IO-Compress/commit/68db44076f4c1a86a2ffe53a958eac6cabaf72e2.patch","https://metacpan.org/release/PMQS/IO-Compress-2.220/changes","http://www.openwall.com/lists/oss-security/2026/05/27/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48959","description":"IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward.\n\nfastForward() compares length $offset (the digit count of the offset, 1 to 19) against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes per iteration.\n\nExtracting a named entry from an attacker supplied zip via IO::Uncompress::Unzip->new($zip, Name => $target) drives a per-byte read loop scaling with the entry's compressed size, up to the non-Zip64 4 GiB cap."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19553","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19553","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-11-09","epss":0.00547,"percentile":0.4609}],"risk":0.2735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19553"},"relatedVulnerabilities":[{"id":"CVE-2026-19553","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-11-09","epss":0.00547,"percentile":0.4609}],"urls":["https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96","https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf","https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082","https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed","https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced","https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80","https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062","https://github.com/python/cpython/issues/156793","https://github.com/python/cpython/pull/158503","https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/","http://www.openwall.com/lists/oss-security/2026/09/30/16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19553","description":"ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19553","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19553","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-11-09","epss":0.00547,"percentile":0.4609}],"risk":0.2735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19553"},"relatedVulnerabilities":[{"id":"CVE-2026-19553","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-11-09","epss":0.00547,"percentile":0.4609}],"urls":["https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96","https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf","https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082","https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed","https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced","https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80","https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062","https://github.com/python/cpython/issues/156793","https://github.com/python/cpython/pull/158503","https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/","http://www.openwall.com/lists/oss-security/2026/09/30/16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19553","description":"ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-19553","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19553","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-11-09","epss":0.00547,"percentile":0.4609}],"risk":0.2735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19553"},"relatedVulnerabilities":[{"id":"CVE-2026-19553","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-11-09","epss":0.00547,"percentile":0.4609}],"urls":["https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96","https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf","https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082","https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed","https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced","https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80","https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062","https://github.com/python/cpython/issues/156793","https://github.com/python/cpython/pull/158503","https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/","http://www.openwall.com/lists/oss-security/2026/09/30/16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19553","description":"ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19553","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19553","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-11-09","epss":0.00547,"percentile":0.4609}],"risk":0.2735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19553"},"relatedVulnerabilities":[{"id":"CVE-2026-19553","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-11-09","epss":0.00547,"percentile":0.4609}],"urls":["https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96","https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf","https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082","https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed","https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced","https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80","https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062","https://github.com/python/cpython/issues/156793","https://github.com/python/cpython/pull/158503","https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/","http://www.openwall.com/lists/oss-security/2026/09/30/16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19553","description":"ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19553","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19553","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-11-09","epss":0.00547,"percentile":0.4609}],"risk":0.2735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19553"},"relatedVulnerabilities":[{"id":"CVE-2026-19553","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-11-09","epss":0.00547,"percentile":0.4609}],"urls":["https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96","https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf","https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082","https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed","https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced","https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80","https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062","https://github.com/python/cpython/issues/156793","https://github.com/python/cpython/pull/158503","https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/","http://www.openwall.com/lists/oss-security/2026/09/30/16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19553","description":"ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied."}]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4035","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-4035","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-4035","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4035","date":"2026-11-09","epss":0.00542,"percentile":0.45808}],"risk":0.271,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4035"},"relatedVulnerabilities":[{"id":"CVE-2025-4035","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4035","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4035","date":"2026-11-09","epss":0.00542,"percentile":0.45808}],"urls":["https://access.redhat.com/errata/RHSA-2025:8128","https://access.redhat.com/security/cve/CVE-2025-4035","https://bugzilla.redhat.com/show_bug.cgi?id=2362651","https://gitlab.gnome.org/GNOME/libsoup/-/issues/443","https://gitlab.gnome.org/GNOME/libsoup/-/work_items/443"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4035","description":"A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4035","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-4035","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-4035","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4035","date":"2026-11-09","epss":0.00542,"percentile":0.45808}],"risk":0.271,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4035"},"relatedVulnerabilities":[{"id":"CVE-2025-4035","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4035","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4035","date":"2026-11-09","epss":0.00542,"percentile":0.45808}],"urls":["https://access.redhat.com/errata/RHSA-2025:8128","https://access.redhat.com/security/cve/CVE-2025-4035","https://bugzilla.redhat.com/show_bug.cgi?id=2362651","https://gitlab.gnome.org/GNOME/libsoup/-/issues/443","https://gitlab.gnome.org/GNOME/libsoup/-/work_items/443"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4035","description":"A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation."}]},{"artifact":{"id":"31c8c616c5398e06","cpes":["cpe:2.3:a:klauspost:compress:v1.19.2:*:*:*:*:*:*:*"],"name":"github.com/klauspost/compress","purl":"pkg:golang/github.com/klauspost/compress@v1.19.2","type":"go-module","version":"v1.19.2","language":"go","licenses":[],"metadata":{"h1Digest":"h1:hMRETovs/pu/dVWN7zIT1PGG8t509MwT6bO7XSi26R8=","mainModule":"github.com/rclone/rclone","architecture":"amd64","goCompiledVersion":"go1.27.2"},"locations":[{"path":"/usr/local/bin/rclone","layerID":"sha256:3ed598c74c07812030a840a2539a9482d9349f27ad19f7eaa640cf48328499d6","accessPath":"/usr/local/bin/rclone","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.20.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6865","versionConstraint":"<1.20.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"github.com/klauspost/compress","version":"v1.19.2"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6865","fix":{"state":"fixed","versions":["1.20.2"],"available":[{"date":"2026-10-12","kind":"release","version":"1.20.2"}]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116591","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-116591","date":"2026-11-09","epss":0.00333,"percentile":0.26668}],"risk":0.26972999999999997,"urls":["https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d","https://github.com/klauspost/compress/releases/tag/v1.20.2"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8","description":"Panic on two-block frames in github.com/klauspost/compress"},"relatedVulnerabilities":[{"id":"CVE-2026-116591","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116591","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-116591","date":"2026-11-09","epss":0.00333,"percentile":0.26668}],"urls":["https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d","https://github.com/klauspost/compress/releases/tag/v1.20.2","https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116591","description":"compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can panic when a crafted two-block frame reaches huff0.ReadTable with an FSE normalized count of 32768 that readNCount stores in int16 as -32768. The wrapped count allows buildDtable to retain stale fse.Scratch decode-table state from the prior block, and nextFast then derives an out-of-range state and indexes beyond the table instead of returning a decode error. Both blocks are required to preserve and then reuse the stale state, allowing untrusted zstd input to crash an application. This issue is fixed in version 1.20.2."},{"id":"GHSA-fpmh-frq8-7rj8","cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116591","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-116591","date":"2026-11-09","epss":0.00333,"percentile":0.26668}],"urls":["https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8","https://nvd.nist.gov/vuln/detail/CVE-2026-116591","https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d","https://github.com/klauspost/compress/releases/tag/v1.20.2"],"severity":"High","namespace":"github:language:go","dataSource":"https://github.com/advisories/GHSA-fpmh-frq8-7rj8","description":"compress zstd: Panic on two-block frames"}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115557","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-115557","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-115557","cwe":"CWE-299","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-115557","date":"2026-11-09","epss":0.00534,"percentile":0.45383}],"risk":0.267,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-115557"},"relatedVulnerabilities":[{"id":"CVE-2026-115557","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115557","cwe":"CWE-299","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-115557","date":"2026-11-09","epss":0.00534,"percentile":0.45383}],"urls":["http://www.openwall.com/lists/oss-security/2026/10/20/29","https://emudhra.we-have-a-problem.com/","https://github.com/python/cpython/commit/21a50891ab4be2e9955239e625ae2b40c6b1854d","https://github.com/python/cpython/commit/36cd295f32fc9ba19399e01abee91231440a41dd","https://github.com/python/cpython/commit/48d9b2712cd52206c7a5882d0fdca4863ed65e93","https://github.com/python/cpython/commit/7dd8b4736a1419750b94a388e6d158be15836fe6","https://github.com/python/cpython/commit/98f0e4ed349f370dc8a00366da1a9797e11c9ed5","https://github.com/python/cpython/commit/a17d9ef549008133eadf20689b1f4787902efe5b","https://github.com/python/cpython/commit/af52b41afa4330fb38583db553631baa2f122f90","https://github.com/python/cpython/commit/c7fd7edf7e0d122a3973cf676fae21b6aaa650a8","https://github.com/python/cpython/commit/e2a9dd97ef9571c710ac0afaa834c8879aebce78","https://github.com/python/cpython/commit/e4500d8a437ee5b988a5410cb9b59d177aa01370","https://github.com/python/cpython/commit/e4f63e65a93cf44c14274aa987e644b8c003625e","https://github.com/python/cpython/commit/e9bf2cf84eebf838a1edaa1c648c2b36345b99d3","https://github.com/python/cpython/issues/160040","https://github.com/python/cpython/pull/160042","https://mail.python.org/archives/list/security-announce@python.org/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/","http://www.openwall.com/lists/oss-security/2026/10/24/5"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115557","description":"Python has added a denylist for known compromised certificates to the \"ssl\" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115557","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-115557","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-115557","cwe":"CWE-299","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-115557","date":"2026-11-09","epss":0.00534,"percentile":0.45383}],"risk":0.267,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-115557"},"relatedVulnerabilities":[{"id":"CVE-2026-115557","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115557","cwe":"CWE-299","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-115557","date":"2026-11-09","epss":0.00534,"percentile":0.45383}],"urls":["http://www.openwall.com/lists/oss-security/2026/10/20/29","https://emudhra.we-have-a-problem.com/","https://github.com/python/cpython/commit/21a50891ab4be2e9955239e625ae2b40c6b1854d","https://github.com/python/cpython/commit/36cd295f32fc9ba19399e01abee91231440a41dd","https://github.com/python/cpython/commit/48d9b2712cd52206c7a5882d0fdca4863ed65e93","https://github.com/python/cpython/commit/7dd8b4736a1419750b94a388e6d158be15836fe6","https://github.com/python/cpython/commit/98f0e4ed349f370dc8a00366da1a9797e11c9ed5","https://github.com/python/cpython/commit/a17d9ef549008133eadf20689b1f4787902efe5b","https://github.com/python/cpython/commit/af52b41afa4330fb38583db553631baa2f122f90","https://github.com/python/cpython/commit/c7fd7edf7e0d122a3973cf676fae21b6aaa650a8","https://github.com/python/cpython/commit/e2a9dd97ef9571c710ac0afaa834c8879aebce78","https://github.com/python/cpython/commit/e4500d8a437ee5b988a5410cb9b59d177aa01370","https://github.com/python/cpython/commit/e4f63e65a93cf44c14274aa987e644b8c003625e","https://github.com/python/cpython/commit/e9bf2cf84eebf838a1edaa1c648c2b36345b99d3","https://github.com/python/cpython/issues/160040","https://github.com/python/cpython/pull/160042","https://mail.python.org/archives/list/security-announce@python.org/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/","http://www.openwall.com/lists/oss-security/2026/10/24/5"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115557","description":"Python has added a denylist for known compromised certificates to the \"ssl\" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-115557","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-115557","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-115557","cwe":"CWE-299","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-115557","date":"2026-11-09","epss":0.00534,"percentile":0.45383}],"risk":0.267,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-115557"},"relatedVulnerabilities":[{"id":"CVE-2026-115557","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115557","cwe":"CWE-299","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-115557","date":"2026-11-09","epss":0.00534,"percentile":0.45383}],"urls":["http://www.openwall.com/lists/oss-security/2026/10/20/29","https://emudhra.we-have-a-problem.com/","https://github.com/python/cpython/commit/21a50891ab4be2e9955239e625ae2b40c6b1854d","https://github.com/python/cpython/commit/36cd295f32fc9ba19399e01abee91231440a41dd","https://github.com/python/cpython/commit/48d9b2712cd52206c7a5882d0fdca4863ed65e93","https://github.com/python/cpython/commit/7dd8b4736a1419750b94a388e6d158be15836fe6","https://github.com/python/cpython/commit/98f0e4ed349f370dc8a00366da1a9797e11c9ed5","https://github.com/python/cpython/commit/a17d9ef549008133eadf20689b1f4787902efe5b","https://github.com/python/cpython/commit/af52b41afa4330fb38583db553631baa2f122f90","https://github.com/python/cpython/commit/c7fd7edf7e0d122a3973cf676fae21b6aaa650a8","https://github.com/python/cpython/commit/e2a9dd97ef9571c710ac0afaa834c8879aebce78","https://github.com/python/cpython/commit/e4500d8a437ee5b988a5410cb9b59d177aa01370","https://github.com/python/cpython/commit/e4f63e65a93cf44c14274aa987e644b8c003625e","https://github.com/python/cpython/commit/e9bf2cf84eebf838a1edaa1c648c2b36345b99d3","https://github.com/python/cpython/issues/160040","https://github.com/python/cpython/pull/160042","https://mail.python.org/archives/list/security-announce@python.org/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/","http://www.openwall.com/lists/oss-security/2026/10/24/5"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115557","description":"Python has added a denylist for known compromised certificates to the \"ssl\" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115557","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-115557","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-115557","cwe":"CWE-299","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-115557","date":"2026-11-09","epss":0.00534,"percentile":0.45383}],"risk":0.267,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-115557"},"relatedVulnerabilities":[{"id":"CVE-2026-115557","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115557","cwe":"CWE-299","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-115557","date":"2026-11-09","epss":0.00534,"percentile":0.45383}],"urls":["http://www.openwall.com/lists/oss-security/2026/10/20/29","https://emudhra.we-have-a-problem.com/","https://github.com/python/cpython/commit/21a50891ab4be2e9955239e625ae2b40c6b1854d","https://github.com/python/cpython/commit/36cd295f32fc9ba19399e01abee91231440a41dd","https://github.com/python/cpython/commit/48d9b2712cd52206c7a5882d0fdca4863ed65e93","https://github.com/python/cpython/commit/7dd8b4736a1419750b94a388e6d158be15836fe6","https://github.com/python/cpython/commit/98f0e4ed349f370dc8a00366da1a9797e11c9ed5","https://github.com/python/cpython/commit/a17d9ef549008133eadf20689b1f4787902efe5b","https://github.com/python/cpython/commit/af52b41afa4330fb38583db553631baa2f122f90","https://github.com/python/cpython/commit/c7fd7edf7e0d122a3973cf676fae21b6aaa650a8","https://github.com/python/cpython/commit/e2a9dd97ef9571c710ac0afaa834c8879aebce78","https://github.com/python/cpython/commit/e4500d8a437ee5b988a5410cb9b59d177aa01370","https://github.com/python/cpython/commit/e4f63e65a93cf44c14274aa987e644b8c003625e","https://github.com/python/cpython/commit/e9bf2cf84eebf838a1edaa1c648c2b36345b99d3","https://github.com/python/cpython/issues/160040","https://github.com/python/cpython/pull/160042","https://mail.python.org/archives/list/security-announce@python.org/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/","http://www.openwall.com/lists/oss-security/2026/10/24/5"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115557","description":"Python has added a denylist for known compromised certificates to the \"ssl\" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115557","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-115557","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-115557","cwe":"CWE-299","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-115557","date":"2026-11-09","epss":0.00534,"percentile":0.45383}],"risk":0.267,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-115557"},"relatedVulnerabilities":[{"id":"CVE-2026-115557","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115557","cwe":"CWE-299","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-115557","date":"2026-11-09","epss":0.00534,"percentile":0.45383}],"urls":["http://www.openwall.com/lists/oss-security/2026/10/20/29","https://emudhra.we-have-a-problem.com/","https://github.com/python/cpython/commit/21a50891ab4be2e9955239e625ae2b40c6b1854d","https://github.com/python/cpython/commit/36cd295f32fc9ba19399e01abee91231440a41dd","https://github.com/python/cpython/commit/48d9b2712cd52206c7a5882d0fdca4863ed65e93","https://github.com/python/cpython/commit/7dd8b4736a1419750b94a388e6d158be15836fe6","https://github.com/python/cpython/commit/98f0e4ed349f370dc8a00366da1a9797e11c9ed5","https://github.com/python/cpython/commit/a17d9ef549008133eadf20689b1f4787902efe5b","https://github.com/python/cpython/commit/af52b41afa4330fb38583db553631baa2f122f90","https://github.com/python/cpython/commit/c7fd7edf7e0d122a3973cf676fae21b6aaa650a8","https://github.com/python/cpython/commit/e2a9dd97ef9571c710ac0afaa834c8879aebce78","https://github.com/python/cpython/commit/e4500d8a437ee5b988a5410cb9b59d177aa01370","https://github.com/python/cpython/commit/e4f63e65a93cf44c14274aa987e644b8c003625e","https://github.com/python/cpython/commit/e9bf2cf84eebf838a1edaa1c648c2b36345b99d3","https://github.com/python/cpython/issues/160040","https://github.com/python/cpython/pull/160042","https://mail.python.org/archives/list/security-announce@python.org/thread/FNAJMZV6XQYLVPABNINDMF3VF66AYLW4/","http://www.openwall.com/lists/oss-security/2026/10/24/5"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115557","description":"Python has added a denylist for known compromised certificates to the \"ssl\" module to ensure user safety even without certificate revocation configured. Known compromised certificates will automatically be rejected regardless of the SSLContext policy configuration."}]},{"artifact":{"id":"1abf88877baea6e9","cpes":["cpe:2.3:a:libgstreamer-plugins-base1.0-0:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer-plugins-base1.0-0:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer_plugins_base1.0_0:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer_plugins_base1.0_0:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer-plugins-base1.0:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer-plugins-base1.0:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer_plugins_base1.0:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer_plugins_base1.0:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer-plugins:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer-plugins:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer_plugins:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer_plugins:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer:libgstreamer-plugins-base1.0-0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libgstreamer:libgstreamer_plugins_base1.0_0:1.28.2-1ubuntu0.1:*:*:*:*:*:*:*"],"name":"libgstreamer-plugins-base1.0-0","purl":"pkg:deb/ubuntu/libgstreamer-plugins-base1.0-0@1.28.2-1ubuntu0.1?arch=amd64&distro=ubuntu-26.04&upstream=gst-plugins-base1.0","type":"deb","version":"1.28.2-1ubuntu0.1","language":"","licenses":["BSD-3-clause","CC-BY-SA-4.0","GPL-2","GPL-2+","LGPL","LGPL-2+","LGPL-2.1","LGPL-2.1+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgstreamer-plugins-base1.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libgstreamer-plugins-base1.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgstreamer-plugins-base1.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libgstreamer-plugins-base1.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gst-plugins-base1.0"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-85150","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gst-plugins-base1.0","version":"1.28.2-1ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-85150","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-85150","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-85150","date":"2026-11-09","epss":0.0053,"percentile":0.45134}],"risk":0.265,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-85150"},"relatedVulnerabilities":[{"id":"CVE-2026-85150","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85150","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-85150","date":"2026-11-09","epss":0.0053,"percentile":0.45134}],"urls":["https://access.redhat.com/errata/RHSA-2026:66460","https://access.redhat.com/errata/RHSA-2026:67145","https://access.redhat.com/errata/RHSA-2026:69100","https://access.redhat.com/security/cve/CVE-2026-85150","https://bugzilla.redhat.com/show_bug.cgi?id=2527936","https://gitlab.freedesktop.org/gstreamer/gstreamer-security/-/merge_requests/120","https://gitlab.freedesktop.org/gstreamer/gstreamer/-/blob/main/subprojects/gst-plugins-base/gst-libs/gst/rtsp/gstrtspmessage.c#L1408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-85150","description":"A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length calculation to underflow, leading to a crash of the process parsing the header. On an RTSP server this can be triggered by a remote, unauthenticated attacker sending a single malformed request when the server has authentication enabled; the same flaw can also be triggered against an RTSP client by a malicious or compromised RTSP server. Successful exploitation results in a denial of service (application crash) and has no confirmed impact on confidentiality or integrity."}]},{"artifact":{"id":"455a85f66fbb1bfc","cpes":["cpe:2.3:a:python3-setuptools-whl:python3-setuptools-whl:78.1.1-0.1build1:*:*:*:*:*:*:*","cpe:2.3:a:python3-setuptools-whl:python3_setuptools_whl:78.1.1-0.1build1:*:*:*:*:*:*:*","cpe:2.3:a:python3_setuptools_whl:python3-setuptools-whl:78.1.1-0.1build1:*:*:*:*:*:*:*","cpe:2.3:a:python3_setuptools_whl:python3_setuptools_whl:78.1.1-0.1build1:*:*:*:*:*:*:*","cpe:2.3:a:python3-setuptools:python3-setuptools-whl:78.1.1-0.1build1:*:*:*:*:*:*:*","cpe:2.3:a:python3-setuptools:python3_setuptools_whl:78.1.1-0.1build1:*:*:*:*:*:*:*","cpe:2.3:a:python3_setuptools:python3-setuptools-whl:78.1.1-0.1build1:*:*:*:*:*:*:*","cpe:2.3:a:python3_setuptools:python3_setuptools_whl:78.1.1-0.1build1:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-setuptools-whl:78.1.1-0.1build1:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_setuptools_whl:78.1.1-0.1build1:*:*:*:*:*:*:*"],"name":"python3-setuptools-whl","purl":"pkg:deb/ubuntu/python3-setuptools-whl@78.1.1-0.1build1?arch=all&distro=ubuntu-26.04&upstream=setuptools","type":"deb","version":"78.1.1-0.1build1","language":"","licenses":["Apache-2.0","BSD-3-Clause","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-setuptools-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-setuptools-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-setuptools-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-setuptools-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-setuptools-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-setuptools-whl.list"}],"upstreams":[{"name":"setuptools"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-59890","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"setuptools","version":"78.1.1-0.1build1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-59890","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-59890","cwe":"CWE-176","type":"Primary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59890","cwe":"CWE-697","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59890","date":"2026-11-09","epss":0.0053,"percentile":0.4511}],"risk":0.265,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-59890"},"relatedVulnerabilities":[{"id":"CVE-2026-59890","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59890","cwe":"CWE-176","type":"Primary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59890","cwe":"CWE-697","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59890","date":"2026-11-09","epss":0.0053,"percentile":0.4511}],"urls":["https://github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f","https://github.com/pypa/setuptools/releases/tag/v83.0.0","https://github.com/pypa/setuptools/security/advisories/GHSA-h35f-9h28-mq5c"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59890","description":"setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unicode normalization, so on macOS APFS or HFS+ an NFD file name could bypass an NFC exclusion rule and be packed into a source distribution. This issue is fixed in version 83.0.0."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15806","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15806","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15806","cwe":"CWE-319","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-15806","cwe":"CWE-522","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15806","date":"2026-11-09","epss":0.00528,"percentile":0.45006}],"risk":0.264,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15806"},"relatedVulnerabilities":[{"id":"CVE-2026-15806","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15806","cwe":"CWE-319","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-15806","cwe":"CWE-522","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15806","date":"2026-11-09","epss":0.00528,"percentile":0.45006}],"urls":["https://github.com/python/cpython/commit/641be42bb07921ba0f8bffe228b1dc706b092ef6","https://github.com/python/cpython/commit/851cf9a7142ecbdd39f831055533f58284ad2bcc","https://github.com/python/cpython/commit/95355ee3a8e1d3c3d4858d1973aa42a9b91a2801","https://github.com/python/cpython/commit/a0d023fbd23773e24b35d8368789470e22cda5d8","https://github.com/python/cpython/commit/a2773a34183b7d94a243bb98fd658926cc5348ce","https://github.com/python/cpython/commit/a7bb524fef61f77ede01f660ffbd591e1d5837ce","https://github.com/python/cpython/commit/dac88d8615078c55f1304ea4c7a2d822700d4e5a","https://github.com/python/cpython/issues/155694","https://github.com/python/cpython/pull/155696","https://mail.python.org/archives/list/security-announce@python.org/thread/3OKPE5S75KDNA7FY7AI3PL2MXM2X5RB3/","http://www.openwall.com/lists/oss-security/2026/08/18/3"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15806","description":"The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP redirect or an on-path position) could capture credentials in cleartext. Credentials added for http:// URLs could likewise be sent over https://.\n\nCredential matching is now scoped by URL scheme. Credentials registered with a URL that includes a scheme are only used for requests with the same scheme. Credentials registered with a bare authority (such as example.com or example.com:8080) continue to match any scheme, preserving compatibility with existing code, including proxy authentication.\n\nUsers who cannot upgrade immediately can mitigate by ensuring that applications never make plain http:// requests to hosts for which credentials are registered, for example by not following redirects to http:// URLs."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15806","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15806","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15806","cwe":"CWE-319","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-15806","cwe":"CWE-522","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15806","date":"2026-11-09","epss":0.00528,"percentile":0.45006}],"risk":0.264,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15806"},"relatedVulnerabilities":[{"id":"CVE-2026-15806","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15806","cwe":"CWE-319","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-15806","cwe":"CWE-522","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15806","date":"2026-11-09","epss":0.00528,"percentile":0.45006}],"urls":["https://github.com/python/cpython/commit/641be42bb07921ba0f8bffe228b1dc706b092ef6","https://github.com/python/cpython/commit/851cf9a7142ecbdd39f831055533f58284ad2bcc","https://github.com/python/cpython/commit/95355ee3a8e1d3c3d4858d1973aa42a9b91a2801","https://github.com/python/cpython/commit/a0d023fbd23773e24b35d8368789470e22cda5d8","https://github.com/python/cpython/commit/a2773a34183b7d94a243bb98fd658926cc5348ce","https://github.com/python/cpython/commit/a7bb524fef61f77ede01f660ffbd591e1d5837ce","https://github.com/python/cpython/commit/dac88d8615078c55f1304ea4c7a2d822700d4e5a","https://github.com/python/cpython/issues/155694","https://github.com/python/cpython/pull/155696","https://mail.python.org/archives/list/security-announce@python.org/thread/3OKPE5S75KDNA7FY7AI3PL2MXM2X5RB3/","http://www.openwall.com/lists/oss-security/2026/08/18/3"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15806","description":"The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP redirect or an on-path position) could capture credentials in cleartext. Credentials added for http:// URLs could likewise be sent over https://.\n\nCredential matching is now scoped by URL scheme. Credentials registered with a URL that includes a scheme are only used for requests with the same scheme. Credentials registered with a bare authority (such as example.com or example.com:8080) continue to match any scheme, preserving compatibility with existing code, including proxy authentication.\n\nUsers who cannot upgrade immediately can mitigate by ensuring that applications never make plain http:// requests to hosts for which credentials are registered, for example by not following redirects to http:// URLs."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-15806","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15806","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15806","cwe":"CWE-319","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-15806","cwe":"CWE-522","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15806","date":"2026-11-09","epss":0.00528,"percentile":0.45006}],"risk":0.264,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15806"},"relatedVulnerabilities":[{"id":"CVE-2026-15806","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15806","cwe":"CWE-319","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-15806","cwe":"CWE-522","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15806","date":"2026-11-09","epss":0.00528,"percentile":0.45006}],"urls":["https://github.com/python/cpython/commit/641be42bb07921ba0f8bffe228b1dc706b092ef6","https://github.com/python/cpython/commit/851cf9a7142ecbdd39f831055533f58284ad2bcc","https://github.com/python/cpython/commit/95355ee3a8e1d3c3d4858d1973aa42a9b91a2801","https://github.com/python/cpython/commit/a0d023fbd23773e24b35d8368789470e22cda5d8","https://github.com/python/cpython/commit/a2773a34183b7d94a243bb98fd658926cc5348ce","https://github.com/python/cpython/commit/a7bb524fef61f77ede01f660ffbd591e1d5837ce","https://github.com/python/cpython/commit/dac88d8615078c55f1304ea4c7a2d822700d4e5a","https://github.com/python/cpython/issues/155694","https://github.com/python/cpython/pull/155696","https://mail.python.org/archives/list/security-announce@python.org/thread/3OKPE5S75KDNA7FY7AI3PL2MXM2X5RB3/","http://www.openwall.com/lists/oss-security/2026/08/18/3"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15806","description":"The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP redirect or an on-path position) could capture credentials in cleartext. Credentials added for http:// URLs could likewise be sent over https://.\n\nCredential matching is now scoped by URL scheme. Credentials registered with a URL that includes a scheme are only used for requests with the same scheme. Credentials registered with a bare authority (such as example.com or example.com:8080) continue to match any scheme, preserving compatibility with existing code, including proxy authentication.\n\nUsers who cannot upgrade immediately can mitigate by ensuring that applications never make plain http:// requests to hosts for which credentials are registered, for example by not following redirects to http:// URLs."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15806","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15806","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15806","cwe":"CWE-319","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-15806","cwe":"CWE-522","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15806","date":"2026-11-09","epss":0.00528,"percentile":0.45006}],"risk":0.264,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15806"},"relatedVulnerabilities":[{"id":"CVE-2026-15806","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15806","cwe":"CWE-319","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-15806","cwe":"CWE-522","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15806","date":"2026-11-09","epss":0.00528,"percentile":0.45006}],"urls":["https://github.com/python/cpython/commit/641be42bb07921ba0f8bffe228b1dc706b092ef6","https://github.com/python/cpython/commit/851cf9a7142ecbdd39f831055533f58284ad2bcc","https://github.com/python/cpython/commit/95355ee3a8e1d3c3d4858d1973aa42a9b91a2801","https://github.com/python/cpython/commit/a0d023fbd23773e24b35d8368789470e22cda5d8","https://github.com/python/cpython/commit/a2773a34183b7d94a243bb98fd658926cc5348ce","https://github.com/python/cpython/commit/a7bb524fef61f77ede01f660ffbd591e1d5837ce","https://github.com/python/cpython/commit/dac88d8615078c55f1304ea4c7a2d822700d4e5a","https://github.com/python/cpython/issues/155694","https://github.com/python/cpython/pull/155696","https://mail.python.org/archives/list/security-announce@python.org/thread/3OKPE5S75KDNA7FY7AI3PL2MXM2X5RB3/","http://www.openwall.com/lists/oss-security/2026/08/18/3"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15806","description":"The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP redirect or an on-path position) could capture credentials in cleartext. Credentials added for http:// URLs could likewise be sent over https://.\n\nCredential matching is now scoped by URL scheme. Credentials registered with a URL that includes a scheme are only used for requests with the same scheme. Credentials registered with a bare authority (such as example.com or example.com:8080) continue to match any scheme, preserving compatibility with existing code, including proxy authentication.\n\nUsers who cannot upgrade immediately can mitigate by ensuring that applications never make plain http:// requests to hosts for which credentials are registered, for example by not following redirects to http:// URLs."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15806","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15806","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15806","cwe":"CWE-319","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-15806","cwe":"CWE-522","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15806","date":"2026-11-09","epss":0.00528,"percentile":0.45006}],"risk":0.264,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15806"},"relatedVulnerabilities":[{"id":"CVE-2026-15806","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15806","cwe":"CWE-319","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-15806","cwe":"CWE-522","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15806","date":"2026-11-09","epss":0.00528,"percentile":0.45006}],"urls":["https://github.com/python/cpython/commit/641be42bb07921ba0f8bffe228b1dc706b092ef6","https://github.com/python/cpython/commit/851cf9a7142ecbdd39f831055533f58284ad2bcc","https://github.com/python/cpython/commit/95355ee3a8e1d3c3d4858d1973aa42a9b91a2801","https://github.com/python/cpython/commit/a0d023fbd23773e24b35d8368789470e22cda5d8","https://github.com/python/cpython/commit/a2773a34183b7d94a243bb98fd658926cc5348ce","https://github.com/python/cpython/commit/a7bb524fef61f77ede01f660ffbd591e1d5837ce","https://github.com/python/cpython/commit/dac88d8615078c55f1304ea4c7a2d822700d4e5a","https://github.com/python/cpython/issues/155694","https://github.com/python/cpython/pull/155696","https://mail.python.org/archives/list/security-announce@python.org/thread/3OKPE5S75KDNA7FY7AI3PL2MXM2X5RB3/","http://www.openwall.com/lists/oss-security/2026/08/18/3"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15806","description":"The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP redirect or an on-path position) could capture credentials in cleartext. Credentials added for http:// URLs could likewise be sent over https://.\n\nCredential matching is now scoped by URL scheme. Credentials registered with a URL that includes a scheme are only used for requests with the same scheme. Credentials registered with a bare authority (such as example.com or example.com:8080) continue to match any scheme, preserving compatibility with existing code, including proxy authentication.\n\nUsers who cannot upgrade immediately can mitigate by ensuring that applications never make plain http:// requests to hosts for which credentials are registered, for example by not following redirects to http:// URLs."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15310","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15310","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15310","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15310","date":"2026-11-09","epss":0.00526,"percentile":0.4484}],"risk":0.263,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15310"},"relatedVulnerabilities":[{"id":"CVE-2026-15310","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15310","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15310","date":"2026-11-09","epss":0.00526,"percentile":0.4484}],"urls":["https://github.com/python/cpython/commit/09a2e7e6678b4f65449e7ad8f112c48f944591e2","https://github.com/python/cpython/commit/1b424c0178a01e155fd0267dc28a8fc1159b33a8","https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89","https://github.com/python/cpython/commit/6257029de42ef89b67f3d20137de87d43e197530","https://github.com/python/cpython/commit/9d167992b59cf5e23c66b9ed742b13f5925f7d70","https://github.com/python/cpython/commit/c2bfbcdd1a11690507a10bc0998f95b8dc6b6fac","https://github.com/python/cpython/commit/dcdd406ddbfc4cb29b24c3df17cbabe21d316ce1","https://github.com/python/cpython/commit/e2311cfb3dd518f008f312fe0631f4f7490d237a","https://github.com/python/cpython/commit/f507e6946a3194e83e1d7b8ee6e14567175e46de","https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4","https://github.com/python/cpython/issues/156002","https://github.com/python/cpython/pull/156003","https://mail.python.org/archives/list/security-announce@python.org/thread/YUHXURX2WZGKGNA4ANYBQS2VZRYQ5JNK/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15310","description":"When decompressing crafted zip files using the bzip/LZMA/Zstandard \n\ncompressions, Python could use an attacker-controlled size to \n\npre-allocate memory, possibly resulting in memory exhaustion."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15310","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15310","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15310","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15310","date":"2026-11-09","epss":0.00526,"percentile":0.4484}],"risk":0.263,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15310"},"relatedVulnerabilities":[{"id":"CVE-2026-15310","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15310","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15310","date":"2026-11-09","epss":0.00526,"percentile":0.4484}],"urls":["https://github.com/python/cpython/commit/09a2e7e6678b4f65449e7ad8f112c48f944591e2","https://github.com/python/cpython/commit/1b424c0178a01e155fd0267dc28a8fc1159b33a8","https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89","https://github.com/python/cpython/commit/6257029de42ef89b67f3d20137de87d43e197530","https://github.com/python/cpython/commit/9d167992b59cf5e23c66b9ed742b13f5925f7d70","https://github.com/python/cpython/commit/c2bfbcdd1a11690507a10bc0998f95b8dc6b6fac","https://github.com/python/cpython/commit/dcdd406ddbfc4cb29b24c3df17cbabe21d316ce1","https://github.com/python/cpython/commit/e2311cfb3dd518f008f312fe0631f4f7490d237a","https://github.com/python/cpython/commit/f507e6946a3194e83e1d7b8ee6e14567175e46de","https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4","https://github.com/python/cpython/issues/156002","https://github.com/python/cpython/pull/156003","https://mail.python.org/archives/list/security-announce@python.org/thread/YUHXURX2WZGKGNA4ANYBQS2VZRYQ5JNK/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15310","description":"When decompressing crafted zip files using the bzip/LZMA/Zstandard \n\ncompressions, Python could use an attacker-controlled size to \n\npre-allocate memory, possibly resulting in memory exhaustion."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-15310","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15310","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15310","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15310","date":"2026-11-09","epss":0.00526,"percentile":0.4484}],"risk":0.263,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15310"},"relatedVulnerabilities":[{"id":"CVE-2026-15310","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15310","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15310","date":"2026-11-09","epss":0.00526,"percentile":0.4484}],"urls":["https://github.com/python/cpython/commit/09a2e7e6678b4f65449e7ad8f112c48f944591e2","https://github.com/python/cpython/commit/1b424c0178a01e155fd0267dc28a8fc1159b33a8","https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89","https://github.com/python/cpython/commit/6257029de42ef89b67f3d20137de87d43e197530","https://github.com/python/cpython/commit/9d167992b59cf5e23c66b9ed742b13f5925f7d70","https://github.com/python/cpython/commit/c2bfbcdd1a11690507a10bc0998f95b8dc6b6fac","https://github.com/python/cpython/commit/dcdd406ddbfc4cb29b24c3df17cbabe21d316ce1","https://github.com/python/cpython/commit/e2311cfb3dd518f008f312fe0631f4f7490d237a","https://github.com/python/cpython/commit/f507e6946a3194e83e1d7b8ee6e14567175e46de","https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4","https://github.com/python/cpython/issues/156002","https://github.com/python/cpython/pull/156003","https://mail.python.org/archives/list/security-announce@python.org/thread/YUHXURX2WZGKGNA4ANYBQS2VZRYQ5JNK/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15310","description":"When decompressing crafted zip files using the bzip/LZMA/Zstandard \n\ncompressions, Python could use an attacker-controlled size to \n\npre-allocate memory, possibly resulting in memory exhaustion."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15310","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15310","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15310","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15310","date":"2026-11-09","epss":0.00526,"percentile":0.4484}],"risk":0.263,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15310"},"relatedVulnerabilities":[{"id":"CVE-2026-15310","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15310","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15310","date":"2026-11-09","epss":0.00526,"percentile":0.4484}],"urls":["https://github.com/python/cpython/commit/09a2e7e6678b4f65449e7ad8f112c48f944591e2","https://github.com/python/cpython/commit/1b424c0178a01e155fd0267dc28a8fc1159b33a8","https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89","https://github.com/python/cpython/commit/6257029de42ef89b67f3d20137de87d43e197530","https://github.com/python/cpython/commit/9d167992b59cf5e23c66b9ed742b13f5925f7d70","https://github.com/python/cpython/commit/c2bfbcdd1a11690507a10bc0998f95b8dc6b6fac","https://github.com/python/cpython/commit/dcdd406ddbfc4cb29b24c3df17cbabe21d316ce1","https://github.com/python/cpython/commit/e2311cfb3dd518f008f312fe0631f4f7490d237a","https://github.com/python/cpython/commit/f507e6946a3194e83e1d7b8ee6e14567175e46de","https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4","https://github.com/python/cpython/issues/156002","https://github.com/python/cpython/pull/156003","https://mail.python.org/archives/list/security-announce@python.org/thread/YUHXURX2WZGKGNA4ANYBQS2VZRYQ5JNK/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15310","description":"When decompressing crafted zip files using the bzip/LZMA/Zstandard \n\ncompressions, Python could use an attacker-controlled size to \n\npre-allocate memory, possibly resulting in memory exhaustion."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15310","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15310","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15310","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15310","date":"2026-11-09","epss":0.00526,"percentile":0.4484}],"risk":0.263,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15310"},"relatedVulnerabilities":[{"id":"CVE-2026-15310","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15310","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15310","date":"2026-11-09","epss":0.00526,"percentile":0.4484}],"urls":["https://github.com/python/cpython/commit/09a2e7e6678b4f65449e7ad8f112c48f944591e2","https://github.com/python/cpython/commit/1b424c0178a01e155fd0267dc28a8fc1159b33a8","https://github.com/python/cpython/commit/31980e84b9a708424a0a1dfecde3fc991e313f89","https://github.com/python/cpython/commit/6257029de42ef89b67f3d20137de87d43e197530","https://github.com/python/cpython/commit/9d167992b59cf5e23c66b9ed742b13f5925f7d70","https://github.com/python/cpython/commit/c2bfbcdd1a11690507a10bc0998f95b8dc6b6fac","https://github.com/python/cpython/commit/dcdd406ddbfc4cb29b24c3df17cbabe21d316ce1","https://github.com/python/cpython/commit/e2311cfb3dd518f008f312fe0631f4f7490d237a","https://github.com/python/cpython/commit/f507e6946a3194e83e1d7b8ee6e14567175e46de","https://github.com/python/cpython/commit/f897dbf2f36a5935700b7c2d94d4681d2136b7d4","https://github.com/python/cpython/issues/156002","https://github.com/python/cpython/pull/156003","https://mail.python.org/archives/list/security-announce@python.org/thread/YUHXURX2WZGKGNA4ANYBQS2VZRYQ5JNK/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15310","description":"When decompressing crafted zip files using the bzip/LZMA/Zstandard \n\ncompressions, Python could use an attacker-controlled size to \n\npre-allocate memory, possibly resulting in memory exhaustion."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19445","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19445","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-11-09","epss":0.00524,"percentile":0.44768}],"risk":0.262,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19445"},"relatedVulnerabilities":[{"id":"CVE-2026-19445","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-11-09","epss":0.00524,"percentile":0.44768}],"urls":["https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d","https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b","https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7","https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8","https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698","https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c","https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b","https://github.com/python/cpython/issues/156293","https://github.com/python/cpython/pull/158504","https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/","http://www.openwall.com/lists/oss-security/2026/09/30/17"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19445","description":"A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19445","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19445","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-11-09","epss":0.00524,"percentile":0.44768}],"risk":0.262,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19445"},"relatedVulnerabilities":[{"id":"CVE-2026-19445","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-11-09","epss":0.00524,"percentile":0.44768}],"urls":["https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d","https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b","https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7","https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8","https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698","https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c","https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b","https://github.com/python/cpython/issues/156293","https://github.com/python/cpython/pull/158504","https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/","http://www.openwall.com/lists/oss-security/2026/09/30/17"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19445","description":"A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-19445","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19445","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-11-09","epss":0.00524,"percentile":0.44768}],"risk":0.262,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19445"},"relatedVulnerabilities":[{"id":"CVE-2026-19445","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-11-09","epss":0.00524,"percentile":0.44768}],"urls":["https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d","https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b","https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7","https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8","https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698","https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c","https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b","https://github.com/python/cpython/issues/156293","https://github.com/python/cpython/pull/158504","https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/","http://www.openwall.com/lists/oss-security/2026/09/30/17"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19445","description":"A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19445","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19445","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-11-09","epss":0.00524,"percentile":0.44768}],"risk":0.262,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19445"},"relatedVulnerabilities":[{"id":"CVE-2026-19445","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-11-09","epss":0.00524,"percentile":0.44768}],"urls":["https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d","https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b","https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7","https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8","https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698","https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c","https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b","https://github.com/python/cpython/issues/156293","https://github.com/python/cpython/pull/158504","https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/","http://www.openwall.com/lists/oss-security/2026/09/30/17"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19445","description":"A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19445","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19445","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-11-09","epss":0.00524,"percentile":0.44768}],"risk":0.262,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19445"},"relatedVulnerabilities":[{"id":"CVE-2026-19445","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-11-09","epss":0.00524,"percentile":0.44768}],"urls":["https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d","https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b","https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7","https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8","https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698","https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c","https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b","https://github.com/python/cpython/issues/156293","https://github.com/python/cpython/pull/158504","https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/","http://www.openwall.com/lists/oss-security/2026/09/30/17"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19445","description":"A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected."}]},{"artifact":{"id":"a14a21eb8bcc5f1a","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.22.1-2ubuntu4.1?arch=amd64&distro=ubuntu-26.04&upstream=krb5","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-09","epss":0.00521,"percentile":0.44511}],"risk":0.2605,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107708"},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-09","epss":0.00521,"percentile":0.44511}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"d43699c9cd5719fa","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.22.1-2ubuntu4.1?arch=amd64&distro=ubuntu-26.04&upstream=krb5","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-09","epss":0.00521,"percentile":0.44511}],"risk":0.2605,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107708"},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-09","epss":0.00521,"percentile":0.44511}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"e0334529fa08f0c3","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.22.1-2ubuntu4.1?arch=amd64&distro=ubuntu-26.04&upstream=krb5","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-09","epss":0.00521,"percentile":0.44511}],"risk":0.2605,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107708"},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-09","epss":0.00521,"percentile":0.44511}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"7ab07b2789627097","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.22.1-2ubuntu4.1?arch=amd64&distro=ubuntu-26.04&upstream=krb5","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-09","epss":0.00521,"percentile":0.44511}],"risk":0.2605,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107708"},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-09","epss":0.00521,"percentile":0.44511}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"cd714f2b10ca1a58","cpes":["cpe:2.3:a:perl-base:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.40.1-7ubuntu0.3?arch=amd64&distro=ubuntu-26.04&upstream=perl","type":"deb","version":"5.40.1-7ubuntu0.3","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","FSFAP","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","LGPL-2.1","REGCOMP","REGCOMP,","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/perl-base.list"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-9538","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"perl","version":"5.40.1-7ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-9538","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-9538","cwe":"CWE-789","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-9538","date":"2026-11-09","epss":0.00517,"percentile":0.44292}],"risk":0.2585,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-9538"},"relatedVulnerabilities":[{"id":"CVE-2026-9538","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9538","cwe":"CWE-789","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-9538","date":"2026-11-09","epss":0.00517,"percentile":0.44292}],"urls":["https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch","https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes","http://www.openwall.com/lists/oss-security/2026/05/26/4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9538","description":"Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle->read($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size."}]},{"artifact":{"id":"6e2da3002b8f8400","cpes":["cpe:2.3:a:com.google.guava:guava:33.6.0-android:*:*:*:*:*:*:*","cpe:2.3:a:google:guava:33.6.0-android:*:*:*:*:*:*:*","cpe:2.3:a:guava:guava:33.6.0-android:*:*:*:*:*:*:*"],"name":"guava","purl":"pkg:maven/com.google.guava/guava@33.6.0-android","type":"java-archive","version":"33.6.0-android","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.google.guava","virtualPath":"/external_jars/https/repo1.maven.org/maven2/com/google/guava/guava/33.6.0-android/guava-33.6.0-android.jar","manifestName":"","pomArtifactID":"guava","archiveDigests":[{"value":"374ff93f90751e8fc6c7cb5046bab9b14ff69c92","algorithm":"sha1"}]},"locations":[{"path":"/external_jars/https/repo1.maven.org/maven2/com/google/guava/guava/33.6.0-android/guava-33.6.0-android.jar","layerID":"sha256:c37faab7631ff0d587a5e0aa99b0f0c91142812ca2868bfc148fcb3dbf2f1e0c","accessPath":"/external_jars/https/repo1.maven.org/maven2/com/google/guava/guava/33.6.0-android/guava-33.6.0-android.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"33.7.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-xxph-c9ww-hj94","versionConstraint":">=4.0,<=33.7.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.google.guava:guava","version":"33.6.0-android"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-xxph-c9ww-hj94","fix":{"state":"fixed","versions":["33.7.2"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"33.7.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102554","cwe":"CWE-502","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2026-102554","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2026-102554","date":"2026-11-09","epss":0.00352,"percentile":0.29079}],"risk":0.25608000000000003,"urls":["https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94","https://nvd.nist.gov/vuln/detail/CVE-2026-102554","https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe","https://github.com/google/guava/releases/tag/v33.7.2"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-xxph-c9ww-hj94","description":"Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation"},"relatedVulnerabilities":[{"id":"CVE-2026-102554","cvss":[{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102554","cwe":"CWE-502","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2026-102554","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2026-102554","date":"2026-11-09","epss":0.00352,"percentile":0.29079}],"urls":["https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe","https://github.com/google/guava/releases/tag/v33.7.2","https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102554","description":"Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances, Guava eagerly allocates an array based on a caller-specified size parameter without throttling, permitting memory exhaustion from crafted serialization streams."}]},{"artifact":{"id":"164b170cdee0b5fb","cpes":["cpe:2.3:a:libsndfile1:libsndfile1:1.2.2-4:*:*:*:*:*:*:*"],"name":"libsndfile1","purl":"pkg:deb/ubuntu/libsndfile1@1.2.2-4?arch=amd64&distro=ubuntu-26.04&upstream=libsndfile","type":"deb","version":"1.2.2-4","language":"","licenses":["Apache-2.0","BSD-2-clause","BSD-3-clause","FSFAP","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","NTP","gsm","sun"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsndfile1/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/libsndfile1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsndfile1:amd64.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/libsndfile1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsndfile"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-37555","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsndfile","version":"1.2.2-4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-37555","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-37555","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-37555","cwe":"CWE-190","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-37555","date":"2026-11-09","epss":0.00504,"percentile":0.43398}],"risk":0.252,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-37555"},"relatedVulnerabilities":[{"id":"CVE-2026-37555","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-37555","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-37555","cwe":"CWE-190","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-37555","date":"2026-11-09","epss":0.00504,"percentile":0.43398}],"urls":["https://gist.github.com/sgInnora/a5f5c19e4bf6f4fb74fab7b0ef2bfcc1","https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151","https://github.com/libsndfile/libsndfile/issues/833","https://access.redhat.com/errata/RHSA-2026:19559","https://access.redhat.com/errata/RHSA-2026:19560","https://access.redhat.com/errata/RHSA-2026:19610","https://access.redhat.com/errata/RHSA-2026:23221","https://access.redhat.com/errata/RHSA-2026:23222","https://access.redhat.com/errata/RHSA-2026:23223","https://access.redhat.com/errata/RHSA-2026:25092","https://access.redhat.com/errata/RHSA-2026:25197","https://access.redhat.com/errata/RHSA-2026:25198","https://access.redhat.com/errata/RHSA-2026:25227","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/security/cve/CVE-2026-37555","https://bugzilla.redhat.com/show_bug.cgi?id=2463856","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-37555.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-37555","description":"An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-58049","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-58049","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-58049","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-58049","cwe":"CWE-787","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-58049","date":"2026-11-09","epss":0.00496,"percentile":0.42865}],"risk":0.248,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58049"},"relatedVulnerabilities":[{"id":"CVE-2026-58049","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58049","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-58049","cwe":"CWE-787","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-58049","date":"2026-11-09","epss":0.00496,"percentile":0.42865}],"urls":["https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c","https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta","https://access.redhat.com/errata/RHSA-2026:43711","https://access.redhat.com/errata/RHSA-2026:51180","https://access.redhat.com/errata/RHSA-2026:52832","https://access.redhat.com/errata/RHSA-2026:52833","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61627","https://access.redhat.com/errata/RHSA-2026:61628","https://access.redhat.com/errata/RHSA-2026:61629","https://access.redhat.com/security/cve/CVE-2026-58049","https://bugzilla.redhat.com/show_bug.cgi?id=2493952","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58049","description":"FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-58049","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-58049","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-58049","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-58049","cwe":"CWE-787","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-58049","date":"2026-11-09","epss":0.00496,"percentile":0.42865}],"risk":0.248,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58049"},"relatedVulnerabilities":[{"id":"CVE-2026-58049","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58049","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-58049","cwe":"CWE-787","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-58049","date":"2026-11-09","epss":0.00496,"percentile":0.42865}],"urls":["https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c","https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta","https://access.redhat.com/errata/RHSA-2026:43711","https://access.redhat.com/errata/RHSA-2026:51180","https://access.redhat.com/errata/RHSA-2026:52832","https://access.redhat.com/errata/RHSA-2026:52833","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61627","https://access.redhat.com/errata/RHSA-2026:61628","https://access.redhat.com/errata/RHSA-2026:61629","https://access.redhat.com/security/cve/CVE-2026-58049","https://bugzilla.redhat.com/show_bug.cgi?id=2493952","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58049","description":"FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-58049","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-58049","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-58049","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-58049","cwe":"CWE-787","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-58049","date":"2026-11-09","epss":0.00496,"percentile":0.42865}],"risk":0.248,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58049"},"relatedVulnerabilities":[{"id":"CVE-2026-58049","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58049","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-58049","cwe":"CWE-787","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-58049","date":"2026-11-09","epss":0.00496,"percentile":0.42865}],"urls":["https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c","https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta","https://access.redhat.com/errata/RHSA-2026:43711","https://access.redhat.com/errata/RHSA-2026:51180","https://access.redhat.com/errata/RHSA-2026:52832","https://access.redhat.com/errata/RHSA-2026:52833","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61627","https://access.redhat.com/errata/RHSA-2026:61628","https://access.redhat.com/errata/RHSA-2026:61629","https://access.redhat.com/security/cve/CVE-2026-58049","https://bugzilla.redhat.com/show_bug.cgi?id=2493952","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58049","description":"FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64835","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-11-09","epss":0.00496,"percentile":0.42821}],"risk":0.248,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64835"},"relatedVulnerabilities":[{"id":"CVE-2026-64835","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-11-09","epss":0.00496,"percentile":0.42821}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64835","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-11-09","epss":0.00496,"percentile":0.42821}],"risk":0.248,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64835"},"relatedVulnerabilities":[{"id":"CVE-2026-64835","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-11-09","epss":0.00496,"percentile":0.42821}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64835","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64835","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-11-09","epss":0.00496,"percentile":0.42821}],"risk":0.248,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64835"},"relatedVulnerabilities":[{"id":"CVE-2026-64835","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64835","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64835","date":"2026-11-09","epss":0.00496,"percentile":0.42821}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","description":"FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count."}]},{"artifact":{"id":"750d0316e4cb0212","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.7.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.7.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=expat","type":"deb","version":"2.7.4-1ubuntu0.2","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-113351","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"expat","version":"2.7.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-113351","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-113351","cwe":"CWE-909","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-113351","date":"2026-11-09","epss":0.00494,"percentile":0.42692}],"risk":0.247,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-113351"},"relatedVulnerabilities":[{"id":"CVE-2026-113351","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113351","cwe":"CWE-909","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-113351","date":"2026-11-09","epss":0.00494,"percentile":0.42692}],"urls":["https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560","https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884","https://github.com/libexpat/libexpat/pull/1431","https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113351","description":"libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XML_ERROR_NO_MEMORY until it is recreated."}]},{"artifact":{"id":"825e401acfd213c2","cpes":["cpe:2.3:a:xserver-common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver-common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xserver-common","purl":"pkg:deb/ubuntu/xserver-common@2%3A21.1.22-1ubuntu1.3?arch=all&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xserver-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xserver-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-34000","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-34000","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-34000","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-34000","date":"2026-11-09","epss":0.00489,"percentile":0.42359}],"risk":0.24450000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34000"},"relatedVulnerabilities":[{"id":"CVE-2026-34000","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34000","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-34000","date":"2026-11-09","epss":0.00489,"percentile":0.42359}],"urls":["https://access.redhat.com/errata/RHSA-2026:19342","https://access.redhat.com/errata/RHSA-2026:20547","https://access.redhat.com/errata/RHSA-2026:20555","https://access.redhat.com/errata/RHSA-2026:20557","https://access.redhat.com/errata/RHSA-2026:20558","https://access.redhat.com/errata/RHSA-2026:20560","https://access.redhat.com/errata/RHSA-2026:20561","https://access.redhat.com/errata/RHSA-2026:20562","https://access.redhat.com/errata/RHSA-2026:20563","https://access.redhat.com/errata/RHSA-2026:20575","https://access.redhat.com/errata/RHSA-2026:20576","https://access.redhat.com/errata/RHSA-2026:20590","https://access.redhat.com/errata/RHSA-2026:21699","https://access.redhat.com/errata/RHSA-2026:21712","https://access.redhat.com/errata/RHSA-2026:21715","https://access.redhat.com/errata/RHSA-2026:21716","https://access.redhat.com/errata/RHSA-2026:21718","https://access.redhat.com/errata/RHSA-2026:21741","https://access.redhat.com/errata/RHSA-2026:21742","https://access.redhat.com/errata/RHSA-2026:22424","https://access.redhat.com/errata/RHSA-2026:22456","https://access.redhat.com/errata/RHSA-2026:23254","https://access.redhat.com/errata/RHSA-2026:23255","https://access.redhat.com/errata/RHSA-2026:23496","https://access.redhat.com/errata/RHSA-2026:24341","https://access.redhat.com/security/cve/CVE-2026-34000","https://bugzilla.redhat.com/show_bug.cgi?id=2451107","https://gitlab.freedesktop.org/xorg/xserver/-/commit/81b6a34f","https://lists.x.org/archives/xorg-announce/2026-April/003677.html","https://www.x.org/Development/Security/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34000","description":"A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server."}]},{"artifact":{"id":"825e401acfd213c2","cpes":["cpe:2.3:a:xserver-common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver-common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xserver-common","purl":"pkg:deb/ubuntu/xserver-common@2%3A21.1.22-1ubuntu1.3?arch=all&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xserver-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xserver-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-34002","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-34002","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-34002","cwe":"CWE-805","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-34002","date":"2026-11-09","epss":0.00489,"percentile":0.42359}],"risk":0.24450000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34002"},"relatedVulnerabilities":[{"id":"CVE-2026-34002","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34002","cwe":"CWE-805","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-34002","date":"2026-11-09","epss":0.00489,"percentile":0.42359}],"urls":["https://access.redhat.com/errata/RHSA-2026:20547","https://access.redhat.com/errata/RHSA-2026:20555","https://access.redhat.com/errata/RHSA-2026:20557","https://access.redhat.com/errata/RHSA-2026:20558","https://access.redhat.com/errata/RHSA-2026:20560","https://access.redhat.com/errata/RHSA-2026:20561","https://access.redhat.com/errata/RHSA-2026:20562","https://access.redhat.com/errata/RHSA-2026:20563","https://access.redhat.com/errata/RHSA-2026:20575","https://access.redhat.com/errata/RHSA-2026:20576","https://access.redhat.com/errata/RHSA-2026:20590","https://access.redhat.com/errata/RHSA-2026:21699","https://access.redhat.com/errata/RHSA-2026:21712","https://access.redhat.com/errata/RHSA-2026:21715","https://access.redhat.com/errata/RHSA-2026:21716","https://access.redhat.com/errata/RHSA-2026:21718","https://access.redhat.com/errata/RHSA-2026:21741","https://access.redhat.com/errata/RHSA-2026:21742","https://access.redhat.com/errata/RHSA-2026:22424","https://access.redhat.com/errata/RHSA-2026:22456","https://access.redhat.com/errata/RHSA-2026:23254","https://access.redhat.com/errata/RHSA-2026:23255","https://access.redhat.com/errata/RHSA-2026:23496","https://access.redhat.com/errata/RHSA-2026:24341","https://access.redhat.com/security/cve/CVE-2026-34002","https://bugzilla.redhat.com/show_bug.cgi?id=2451112","https://gitlab.freedesktop.org/xorg/xserver/-/commit/f056ce1c","https://lists.x.org/archives/xorg-announce/2026-April/003677.html","https://www.x.org/Development/Security/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34002","description":"A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service."}]},{"artifact":{"id":"e55ab909ded790e2","cpes":["cpe:2.3:a:xvfb:xvfb:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xvfb","purl":"pkg:deb/ubuntu/xvfb@2%3A21.1.22-1ubuntu1.3?arch=amd64&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xvfb/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xvfb/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-34000","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-34000","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-34000","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-34000","date":"2026-11-09","epss":0.00489,"percentile":0.42359}],"risk":0.24450000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34000"},"relatedVulnerabilities":[{"id":"CVE-2026-34000","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34000","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-34000","date":"2026-11-09","epss":0.00489,"percentile":0.42359}],"urls":["https://access.redhat.com/errata/RHSA-2026:19342","https://access.redhat.com/errata/RHSA-2026:20547","https://access.redhat.com/errata/RHSA-2026:20555","https://access.redhat.com/errata/RHSA-2026:20557","https://access.redhat.com/errata/RHSA-2026:20558","https://access.redhat.com/errata/RHSA-2026:20560","https://access.redhat.com/errata/RHSA-2026:20561","https://access.redhat.com/errata/RHSA-2026:20562","https://access.redhat.com/errata/RHSA-2026:20563","https://access.redhat.com/errata/RHSA-2026:20575","https://access.redhat.com/errata/RHSA-2026:20576","https://access.redhat.com/errata/RHSA-2026:20590","https://access.redhat.com/errata/RHSA-2026:21699","https://access.redhat.com/errata/RHSA-2026:21712","https://access.redhat.com/errata/RHSA-2026:21715","https://access.redhat.com/errata/RHSA-2026:21716","https://access.redhat.com/errata/RHSA-2026:21718","https://access.redhat.com/errata/RHSA-2026:21741","https://access.redhat.com/errata/RHSA-2026:21742","https://access.redhat.com/errata/RHSA-2026:22424","https://access.redhat.com/errata/RHSA-2026:22456","https://access.redhat.com/errata/RHSA-2026:23254","https://access.redhat.com/errata/RHSA-2026:23255","https://access.redhat.com/errata/RHSA-2026:23496","https://access.redhat.com/errata/RHSA-2026:24341","https://access.redhat.com/security/cve/CVE-2026-34000","https://bugzilla.redhat.com/show_bug.cgi?id=2451107","https://gitlab.freedesktop.org/xorg/xserver/-/commit/81b6a34f","https://lists.x.org/archives/xorg-announce/2026-April/003677.html","https://www.x.org/Development/Security/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34000","description":"A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server."}]},{"artifact":{"id":"e55ab909ded790e2","cpes":["cpe:2.3:a:xvfb:xvfb:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xvfb","purl":"pkg:deb/ubuntu/xvfb@2%3A21.1.22-1ubuntu1.3?arch=amd64&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xvfb/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xvfb/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-34002","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-34002","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-34002","cwe":"CWE-805","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-34002","date":"2026-11-09","epss":0.00489,"percentile":0.42359}],"risk":0.24450000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34002"},"relatedVulnerabilities":[{"id":"CVE-2026-34002","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34002","cwe":"CWE-805","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-34002","date":"2026-11-09","epss":0.00489,"percentile":0.42359}],"urls":["https://access.redhat.com/errata/RHSA-2026:20547","https://access.redhat.com/errata/RHSA-2026:20555","https://access.redhat.com/errata/RHSA-2026:20557","https://access.redhat.com/errata/RHSA-2026:20558","https://access.redhat.com/errata/RHSA-2026:20560","https://access.redhat.com/errata/RHSA-2026:20561","https://access.redhat.com/errata/RHSA-2026:20562","https://access.redhat.com/errata/RHSA-2026:20563","https://access.redhat.com/errata/RHSA-2026:20575","https://access.redhat.com/errata/RHSA-2026:20576","https://access.redhat.com/errata/RHSA-2026:20590","https://access.redhat.com/errata/RHSA-2026:21699","https://access.redhat.com/errata/RHSA-2026:21712","https://access.redhat.com/errata/RHSA-2026:21715","https://access.redhat.com/errata/RHSA-2026:21716","https://access.redhat.com/errata/RHSA-2026:21718","https://access.redhat.com/errata/RHSA-2026:21741","https://access.redhat.com/errata/RHSA-2026:21742","https://access.redhat.com/errata/RHSA-2026:22424","https://access.redhat.com/errata/RHSA-2026:22456","https://access.redhat.com/errata/RHSA-2026:23254","https://access.redhat.com/errata/RHSA-2026:23255","https://access.redhat.com/errata/RHSA-2026:23496","https://access.redhat.com/errata/RHSA-2026:24341","https://access.redhat.com/security/cve/CVE-2026-34002","https://bugzilla.redhat.com/show_bug.cgi?id=2451112","https://gitlab.freedesktop.org/xorg/xserver/-/commit/f056ce1c","https://lists.x.org/archives/xorg-announce/2026-April/003677.html","https://www.x.org/Development/Security/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34002","description":"A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service."}]},{"artifact":{"id":"60af6de63c33b882","cpes":["cpe:2.3:a:python3-pip-whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*"],"name":"python3-pip-whl","purl":"pkg:deb/ubuntu/python3-pip-whl@25.1.1%2Bdfsg-1ubuntu2?arch=all&distro=ubuntu-26.04&upstream=python-pip","type":"deb","version":"25.1.1+dfsg-1ubuntu2","language":"","licenses":["Apache-2.0","BSD-2","BSD-3","Expat","ISC","MPL-2","MPL-2.0","Python"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-pip-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-pip-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.list"}],"upstreams":[{"name":"python-pip"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-57585","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python-pip","version":"25.1.1+dfsg-1ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-57585","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-57585","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-57585","date":"2026-11-09","epss":0.00488,"percentile":0.4229}],"risk":0.244,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-57585"},"relatedVulnerabilities":[{"id":"CVE-2026-57585","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-57585","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-57585","date":"2026-11-09","epss":0.00488,"percentile":0.4229}],"urls":["https://github.com/msgpack/msgpack-python/commit/2c56ddb5d0025ed481d962c0f5d62d19dec7476d","https://github.com/msgpack/msgpack-python/security/advisories/GHSA-6v7p-g79w-8964"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-57585","description":"MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.1, there is an Out-of-bounds read/crash on Unpacker reuse after a caught error, potentially leading to a DoS attack.  If the Unpacker is used repeatedly after an error occurs, the process may crash with a SEGV. This issue has been fixed in version 1.2.1."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66041","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-11-09","epss":0.00487,"percentile":0.42257}],"risk":0.24350000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66041"},"relatedVulnerabilities":[{"id":"CVE-2026-66041","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-11-09","epss":0.00487,"percentile":0.42257}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66041","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-11-09","epss":0.00487,"percentile":0.42257}],"risk":0.24350000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66041"},"relatedVulnerabilities":[{"id":"CVE-2026-66041","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-11-09","epss":0.00487,"percentile":0.42257}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66041","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66041","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-11-09","epss":0.00487,"percentile":0.42257}],"risk":0.24350000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66041"},"relatedVulnerabilities":[{"id":"CVE-2026-66041","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66041","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66041","date":"2026-11-09","epss":0.00487,"percentile":0.42257}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66041","description":"FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution."}]},{"artifact":{"id":"f626e6c2bbd45cbe","cpes":["cpe:2.3:a:libjson-glib-1.0-0:libjson-glib-1.0-0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson-glib-1.0-0:libjson_glib_1.0_0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson_glib_1.0_0:libjson-glib-1.0-0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson_glib_1.0_0:libjson_glib_1.0_0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson-glib-1.0:libjson-glib-1.0-0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson-glib-1.0:libjson_glib_1.0_0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson_glib_1.0:libjson-glib-1.0-0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson_glib_1.0:libjson_glib_1.0_0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson-glib:libjson-glib-1.0-0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson-glib:libjson_glib_1.0_0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson_glib:libjson-glib-1.0-0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson_glib:libjson_glib_1.0_0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson:libjson-glib-1.0-0:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson:libjson_glib_1.0_0:1.10.8\\+ds-2:*:*:*:*:*:*:*"],"name":"libjson-glib-1.0-0","purl":"pkg:deb/ubuntu/libjson-glib-1.0-0@1.10.8%2Bds-2?arch=amd64&distro=ubuntu-26.04&upstream=json-glib","type":"deb","version":"1.10.8+ds-2","language":"","licenses":["CC0-1.0","Expat","LGPL-2.1","LGPL-2.1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libjson-glib-1.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libjson-glib-1.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libjson-glib-1.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libjson-glib-1.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"json-glib"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120194","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"json-glib","version":"1.10.8+ds-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-120194","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-120194","cwe":"CWE-835","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-120194","date":"2026-11-09","epss":0.00475,"percentile":0.41348}],"risk":0.2375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-120194"},"relatedVulnerabilities":[{"id":"CVE-2026-120194","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120194","cwe":"CWE-835","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-120194","date":"2026-11-09","epss":0.00475,"percentile":0.41348}],"urls":["https://access.redhat.com/security/cve/CVE-2026-120194","https://bugzilla.redhat.com/show_bug.cgi?id=2564418","https://gitlab.gnome.org/GNOME/json-glib/-/issues/96"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120194","description":"A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service."}]},{"artifact":{"id":"3b1bb1f62e317c07","cpes":["cpe:2.3:a:libjson-glib-1.0-common:libjson-glib-1.0-common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson-glib-1.0-common:libjson_glib_1.0_common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson_glib_1.0_common:libjson-glib-1.0-common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson_glib_1.0_common:libjson_glib_1.0_common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson-glib-1.0:libjson-glib-1.0-common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson-glib-1.0:libjson_glib_1.0_common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson_glib_1.0:libjson-glib-1.0-common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson_glib_1.0:libjson_glib_1.0_common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson-glib:libjson-glib-1.0-common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson-glib:libjson_glib_1.0_common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson_glib:libjson-glib-1.0-common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson_glib:libjson_glib_1.0_common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson:libjson-glib-1.0-common:1.10.8\\+ds-2:*:*:*:*:*:*:*","cpe:2.3:a:libjson:libjson_glib_1.0_common:1.10.8\\+ds-2:*:*:*:*:*:*:*"],"name":"libjson-glib-1.0-common","purl":"pkg:deb/ubuntu/libjson-glib-1.0-common@1.10.8%2Bds-2?arch=all&distro=ubuntu-26.04&upstream=json-glib","type":"deb","version":"1.10.8+ds-2","language":"","licenses":["CC0-1.0","Expat","LGPL-2.1","LGPL-2.1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libjson-glib-1.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libjson-glib-1.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libjson-glib-1.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libjson-glib-1.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libjson-glib-1.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libjson-glib-1.0-common.list"}],"upstreams":[{"name":"json-glib"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120194","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"json-glib","version":"1.10.8+ds-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-120194","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-120194","cwe":"CWE-835","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-120194","date":"2026-11-09","epss":0.00475,"percentile":0.41348}],"risk":0.2375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-120194"},"relatedVulnerabilities":[{"id":"CVE-2026-120194","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120194","cwe":"CWE-835","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-120194","date":"2026-11-09","epss":0.00475,"percentile":0.41348}],"urls":["https://access.redhat.com/security/cve/CVE-2026-120194","https://bugzilla.redhat.com/show_bug.cgi?id=2564418","https://gitlab.gnome.org/GNOME/json-glib/-/issues/96"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120194","description":"A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19672","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19672","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-11-09","epss":0.00472,"percentile":0.41049}],"risk":0.23600000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19672"},"relatedVulnerabilities":[{"id":"CVE-2026-19672","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-11-09","epss":0.00472,"percentile":0.41049}],"urls":["https://github.com/python/cpython/pull/156000","https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/","http://www.openwall.com/lists/oss-security/2026/08/25/10"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19672","description":"The tarfile module's tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member's\n name must contain the destination directory's own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19672","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19672","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-11-09","epss":0.00472,"percentile":0.41049}],"risk":0.23600000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19672"},"relatedVulnerabilities":[{"id":"CVE-2026-19672","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-11-09","epss":0.00472,"percentile":0.41049}],"urls":["https://github.com/python/cpython/pull/156000","https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/","http://www.openwall.com/lists/oss-security/2026/08/25/10"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19672","description":"The tarfile module's tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member's\n name must contain the destination directory's own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-19672","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19672","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-11-09","epss":0.00472,"percentile":0.41049}],"risk":0.23600000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19672"},"relatedVulnerabilities":[{"id":"CVE-2026-19672","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-11-09","epss":0.00472,"percentile":0.41049}],"urls":["https://github.com/python/cpython/pull/156000","https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/","http://www.openwall.com/lists/oss-security/2026/08/25/10"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19672","description":"The tarfile module's tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member's\n name must contain the destination directory's own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19672","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19672","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-11-09","epss":0.00472,"percentile":0.41049}],"risk":0.23600000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19672"},"relatedVulnerabilities":[{"id":"CVE-2026-19672","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-11-09","epss":0.00472,"percentile":0.41049}],"urls":["https://github.com/python/cpython/pull/156000","https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/","http://www.openwall.com/lists/oss-security/2026/08/25/10"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19672","description":"The tarfile module's tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member's\n name must contain the destination directory's own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19672","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19672","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-11-09","epss":0.00472,"percentile":0.41049}],"risk":0.23600000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19672"},"relatedVulnerabilities":[{"id":"CVE-2026-19672","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-11-09","epss":0.00472,"percentile":0.41049}],"urls":["https://github.com/python/cpython/pull/156000","https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/","http://www.openwall.com/lists/oss-security/2026/08/25/10"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19672","description":"The tarfile module's tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member's\n name must contain the destination directory's own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-47057","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-47057","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-47057","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-47057","date":"2026-11-09","epss":0.0047,"percentile":0.40937}],"risk":0.23500000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-47057"},"relatedVulnerabilities":[{"id":"CVE-2026-47057","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-47057","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-47057","date":"2026-11-09","epss":0.0047,"percentile":0.40937}],"urls":["https://www.oracle.com/security-alerts/cpujul2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-07-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-47057","description":"Vulnerability in Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and  11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-47057","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-47057","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-47057","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-47057","date":"2026-11-09","epss":0.0047,"percentile":0.40937}],"risk":0.23500000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-47057"},"relatedVulnerabilities":[{"id":"CVE-2026-47057","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-47057","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-47057","date":"2026-11-09","epss":0.0047,"percentile":0.40937}],"urls":["https://www.oracle.com/security-alerts/cpujul2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-07-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-47057","description":"Vulnerability in Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and  11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."}]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6809","versionConstraint":"<1.26.10||>=1.27.0-0,<1.27.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6809","fix":{"state":"fixed","versions":["1.26.10","1.27.3"],"available":[{"date":"2026-10-20","kind":"release","version":"1.26.10"},{"date":"2026-10-20","kind":"release","version":"1.27.3"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111943","cwe":"CWE-299","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-111943","date":"2026-11-09","epss":0.00396,"percentile":0.34049}],"risk":0.23364,"urls":["https://go.dev/issue/82345","https://groups.google.com/g/golang-announce/c/66pojueaQek"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/851047","description":"On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action.\n\nTo defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy."},"relatedVulnerabilities":[{"id":"CVE-2026-111943","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111943","cwe":"CWE-299","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-111943","date":"2026-11-09","epss":0.00396,"percentile":0.34049}],"urls":["https://go.dev/cl/851047","https://go.dev/issue/82345","https://groups.google.com/g/golang-announce/c/66pojueaQek","https://pkg.go.dev/vuln/GO-2026-6809","http://www.openwall.com/lists/oss-security/2026/10/20/29"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-111943","description":"On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6809","versionConstraint":"<1.26.10||>=1.27.0-0,<1.27.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6809","fix":{"state":"fixed","versions":["1.26.10","1.27.3"],"available":[{"date":"2026-10-20","kind":"release","version":"1.26.10"},{"date":"2026-10-20","kind":"release","version":"1.27.3"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111943","cwe":"CWE-299","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-111943","date":"2026-11-09","epss":0.00396,"percentile":0.34049}],"risk":0.23364,"urls":["https://go.dev/issue/82345","https://groups.google.com/g/golang-announce/c/66pojueaQek"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/851047","description":"On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action.\n\nTo defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy."},"relatedVulnerabilities":[{"id":"CVE-2026-111943","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111943","cwe":"CWE-299","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-111943","date":"2026-11-09","epss":0.00396,"percentile":0.34049}],"urls":["https://go.dev/cl/851047","https://go.dev/issue/82345","https://groups.google.com/g/golang-announce/c/66pojueaQek","https://pkg.go.dev/vuln/GO-2026-6809","http://www.openwall.com/lists/oss-security/2026/10/20/29"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-111943","description":"On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy."}]},{"artifact":{"id":"c4980ec93c1d6f9d","cpes":["cpe:2.3:a:golang:go:1.27.2:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.2","type":"go-module","version":"go1.27.2","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.2"},"locations":[{"path":"/usr/local/bin/rclone","layerID":"sha256:3ed598c74c07812030a840a2539a9482d9349f27ad19f7eaa640cf48328499d6","accessPath":"/usr/local/bin/rclone","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6809","versionConstraint":"<1.26.10||>=1.27.0-0,<1.27.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.2"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6809","fix":{"state":"fixed","versions":["1.26.10","1.27.3"],"available":[{"date":"2026-10-20","kind":"release","version":"1.26.10"},{"date":"2026-10-20","kind":"release","version":"1.27.3"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111943","cwe":"CWE-299","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-111943","date":"2026-11-09","epss":0.00396,"percentile":0.34049}],"risk":0.23364,"urls":["https://go.dev/issue/82345","https://groups.google.com/g/golang-announce/c/66pojueaQek"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/851047","description":"On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action.\n\nTo defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy."},"relatedVulnerabilities":[{"id":"CVE-2026-111943","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-111943","cwe":"CWE-299","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-111943","date":"2026-11-09","epss":0.00396,"percentile":0.34049}],"urls":["https://go.dev/cl/851047","https://go.dev/issue/82345","https://groups.google.com/g/golang-announce/c/66pojueaQek","https://pkg.go.dev/vuln/GO-2026-6809","http://www.openwall.com/lists/oss-security/2026/10/20/29"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-111943","description":"On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107695","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107695","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-11-09","epss":0.00467,"percentile":0.40678}],"risk":0.23349999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107695"},"relatedVulnerabilities":[{"id":"CVE-2026-107695","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-11-09","epss":0.00467,"percentile":0.40678}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618","https://gist.github.com/OxBat/59574a2940092cda1b6e76bbf96f53d0","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L866","https://github.com/FFmpeg/FFmpeg/commit/0e6eef35517a","https://github.com/FFmpeg/FFmpeg/commit/a4ddaba8bb78","https://github.com/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-infinite-loop-via-self-referencing-playlist"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","description":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107695","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107695","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-11-09","epss":0.00467,"percentile":0.40678}],"risk":0.23349999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107695"},"relatedVulnerabilities":[{"id":"CVE-2026-107695","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-11-09","epss":0.00467,"percentile":0.40678}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618","https://gist.github.com/OxBat/59574a2940092cda1b6e76bbf96f53d0","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L866","https://github.com/FFmpeg/FFmpeg/commit/0e6eef35517a","https://github.com/FFmpeg/FFmpeg/commit/a4ddaba8bb78","https://github.com/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-infinite-loop-via-self-referencing-playlist"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","description":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107695","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107695","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-11-09","epss":0.00467,"percentile":0.40678}],"risk":0.23349999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107695"},"relatedVulnerabilities":[{"id":"CVE-2026-107695","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107695","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107695","date":"2026-11-09","epss":0.00467,"percentile":0.40678}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618","https://gist.github.com/OxBat/59574a2940092cda1b6e76bbf96f53d0","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L866","https://github.com/FFmpeg/FFmpeg/commit/0e6eef35517a","https://github.com/FFmpeg/FFmpeg/commit/a4ddaba8bb78","https://github.com/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-infinite-loop-via-self-referencing-playlist"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107695","description":"FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a crafted self-referencing playlist that endlessly adds variants in hls_read_header(), causing unbounded CPU and I/O consumption."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38346","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38346","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38346","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38346","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"risk":0.22999999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38346"},"relatedVulnerabilities":[{"id":"CVE-2026-38346","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38346","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38346","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21584"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38346","description":"An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38348","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38348","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38348","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38348","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"risk":0.22999999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38348"},"relatedVulnerabilities":[{"id":"CVE-2026-38348","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38348","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38348","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21588"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38348","description":"An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38349","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38349","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38349","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38349","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"risk":0.22999999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38349"},"relatedVulnerabilities":[{"id":"CVE-2026-38349","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38349","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38349","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21592"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38349","description":"An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38346","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38346","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38346","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38346","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"risk":0.22999999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38346"},"relatedVulnerabilities":[{"id":"CVE-2026-38346","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38346","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38346","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21584"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38346","description":"An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38348","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38348","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38348","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38348","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"risk":0.22999999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38348"},"relatedVulnerabilities":[{"id":"CVE-2026-38348","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38348","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38348","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21588"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38348","description":"An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38349","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38349","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38349","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38349","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"risk":0.22999999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38349"},"relatedVulnerabilities":[{"id":"CVE-2026-38349","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38349","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38349","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21592"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38349","description":"An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38346","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38346","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38346","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38346","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"risk":0.22999999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38346"},"relatedVulnerabilities":[{"id":"CVE-2026-38346","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38346","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38346","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21584"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38346","description":"An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38348","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38348","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38348","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38348","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"risk":0.22999999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38348"},"relatedVulnerabilities":[{"id":"CVE-2026-38348","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38348","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38348","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21588"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38348","description":"An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38349","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38349","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38349","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38349","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"risk":0.22999999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38349"},"relatedVulnerabilities":[{"id":"CVE-2026-38349","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38349","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38349","date":"2026-11-09","epss":0.0046,"percentile":0.40138}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21592"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38349","description":"An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted image file."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38344","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38344","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38344","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38344","date":"2026-11-09","epss":0.0046,"percentile":0.40135}],"risk":0.22999999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38344"},"relatedVulnerabilities":[{"id":"CVE-2026-38344","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38344","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38344","date":"2026-11-09","epss":0.0046,"percentile":0.40135}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21583"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38344","description":"A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38344","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38344","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38344","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38344","date":"2026-11-09","epss":0.0046,"percentile":0.40135}],"risk":0.22999999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38344"},"relatedVulnerabilities":[{"id":"CVE-2026-38344","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38344","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38344","date":"2026-11-09","epss":0.0046,"percentile":0.40135}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21583"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38344","description":"A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38344","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38344","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38344","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38344","date":"2026-11-09","epss":0.0046,"percentile":0.40135}],"risk":0.22999999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38344"},"relatedVulnerabilities":[{"id":"CVE-2026-38344","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38344","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38344","date":"2026-11-09","epss":0.0046,"percentile":0.40135}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21583"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38344","description":"A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file."}]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-2436","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-2436","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-2436","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-2436","date":"2026-11-09","epss":0.00455,"percentile":0.39771}],"risk":0.2275,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-2436"},"relatedVulnerabilities":[{"id":"CVE-2026-2436","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-2436","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-2436","date":"2026-11-09","epss":0.00455,"percentile":0.39771}],"urls":["https://access.redhat.com/security/cve/CVE-2026-2436","https://bugzilla.redhat.com/show_bug.cgi?id=2442909","https://gitlab.gnome.org/GNOME/libsoup/-/issues/501"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-2436","description":"A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the `soup_server_disconnect()` function frees connection objects prematurely, even if a TLS handshake is still pending. If the handshake completes after the connection object has been freed, a dangling pointer is accessed, leading to a server crash and a Denial of Service."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-2436","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-2436","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-2436","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-2436","date":"2026-11-09","epss":0.00455,"percentile":0.39771}],"risk":0.2275,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-2436"},"relatedVulnerabilities":[{"id":"CVE-2026-2436","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-2436","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-2436","date":"2026-11-09","epss":0.00455,"percentile":0.39771}],"urls":["https://access.redhat.com/security/cve/CVE-2026-2436","https://bugzilla.redhat.com/show_bug.cgi?id=2442909","https://gitlab.gnome.org/GNOME/libsoup/-/issues/501"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-2436","description":"A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the `soup_server_disconnect()` function frees connection objects prematurely, even if a TLS handshake is still pending. If the handshake completes after the connection object has been freed, a dangling pointer is accessed, leading to a server crash and a Denial of Service."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-12706","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-12706","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-12706","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-12706","date":"2026-11-09","epss":0.00454,"percentile":0.3967}],"risk":0.22699999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-12706"},"relatedVulnerabilities":[{"id":"CVE-2026-12706","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12706","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-12706","date":"2026-11-09","epss":0.00454,"percentile":0.3967}],"urls":["https://access.redhat.com/security/cve/CVE-2026-12706","https://bugzilla.redhat.com/show_bug.cgi?id=2490710","https://lists.ffmpeg.org/archives/list/ffmpeg-devel@ffmpeg.org/message/TTRIJZA7UL6KJTEDMMBGZPLLJERJ3EFX/","https://patchwork.ffmpeg.org/project/ffmpeg/patch/177766314111.63.10674887811034989327@29965ddac10e/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12706","description":"A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by providing a specially crafted AVI file containing a malicious RASC video stream. When a user opens or plays the file, the decoder reads from freed heap memory, which could lead to a denial of service (crash)."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-12706","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-12706","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-12706","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-12706","date":"2026-11-09","epss":0.00454,"percentile":0.3967}],"risk":0.22699999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-12706"},"relatedVulnerabilities":[{"id":"CVE-2026-12706","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12706","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-12706","date":"2026-11-09","epss":0.00454,"percentile":0.3967}],"urls":["https://access.redhat.com/security/cve/CVE-2026-12706","https://bugzilla.redhat.com/show_bug.cgi?id=2490710","https://lists.ffmpeg.org/archives/list/ffmpeg-devel@ffmpeg.org/message/TTRIJZA7UL6KJTEDMMBGZPLLJERJ3EFX/","https://patchwork.ffmpeg.org/project/ffmpeg/patch/177766314111.63.10674887811034989327@29965ddac10e/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12706","description":"A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by providing a specially crafted AVI file containing a malicious RASC video stream. When a user opens or plays the file, the decoder reads from freed heap memory, which could lead to a denial of service (crash)."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-12706","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-12706","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-12706","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-12706","date":"2026-11-09","epss":0.00454,"percentile":0.3967}],"risk":0.22699999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-12706"},"relatedVulnerabilities":[{"id":"CVE-2026-12706","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12706","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-12706","date":"2026-11-09","epss":0.00454,"percentile":0.3967}],"urls":["https://access.redhat.com/security/cve/CVE-2026-12706","https://bugzilla.redhat.com/show_bug.cgi?id=2490710","https://lists.ffmpeg.org/archives/list/ffmpeg-devel@ffmpeg.org/message/TTRIJZA7UL6KJTEDMMBGZPLLJERJ3EFX/","https://patchwork.ffmpeg.org/project/ffmpeg/patch/177766314111.63.10674887811034989327@29965ddac10e/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12706","description":"A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but a subsequent reallocation of that same buffer during move-table processing leaves the pointer dangling. An attacker could exploit this by providing a specially crafted AVI file containing a malicious RASC video stream. When a user opens or plays the file, the decoder reads from freed heap memory, which could lead to a denial of service (crash)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83357","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83357","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83357","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83357","date":"2026-11-09","epss":0.00452,"percentile":0.39502}],"risk":0.22599999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83357"},"relatedVulnerabilities":[{"id":"CVE-2026-83357","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83357","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83357","date":"2026-11-09","epss":0.00452,"percentile":0.39502}],"urls":["https://www.oracle.com/security-alerts/cspusep2026.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83357","description":"Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler).   The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1;  Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM for JDK, Oracle GraalVM.  Successful attacks of this vulnerability can result in takeover of Oracle GraalVM for JDK, Oracle GraalVM. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83357","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83357","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83357","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83357","date":"2026-11-09","epss":0.00452,"percentile":0.39502}],"risk":0.22599999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83357"},"relatedVulnerabilities":[{"id":"CVE-2026-83357","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83357","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83357","date":"2026-11-09","epss":0.00452,"percentile":0.39502}],"urls":["https://www.oracle.com/security-alerts/cspusep2026.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83357","description":"Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler).   The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1;  Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM for JDK, Oracle GraalVM.  Successful attacks of this vulnerability can result in takeover of Oracle GraalVM for JDK, Oracle GraalVM. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-30999","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-30999","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-30999","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30999","date":"2026-11-09","epss":0.00452,"percentile":0.39495}],"risk":0.22599999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-30999"},"relatedVulnerabilities":[{"id":"CVE-2026-30999","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-30999","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30999","date":"2026-11-09","epss":0.00452,"percentile":0.39495}],"urls":["https://excellent-oatmeal-319.notion.site/CVE-2026-30999-Memory-Leak-e0d88ac53e2e42c1b5ef9aa3497e27b6","https://ffmpeg.org/doxygen/7.0/zmqsend_8c_source.html","https://github.com/FFmpeg/FFmpeg/blob/master/tools/zmqsend.c","https://www.ffmpeg.org/download.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-30999","description":"A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-30999","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-30999","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-30999","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30999","date":"2026-11-09","epss":0.00452,"percentile":0.39495}],"risk":0.22599999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-30999"},"relatedVulnerabilities":[{"id":"CVE-2026-30999","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-30999","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30999","date":"2026-11-09","epss":0.00452,"percentile":0.39495}],"urls":["https://excellent-oatmeal-319.notion.site/CVE-2026-30999-Memory-Leak-e0d88ac53e2e42c1b5ef9aa3497e27b6","https://ffmpeg.org/doxygen/7.0/zmqsend_8c_source.html","https://github.com/FFmpeg/FFmpeg/blob/master/tools/zmqsend.c","https://www.ffmpeg.org/download.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-30999","description":"A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-30999","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-30999","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-30999","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30999","date":"2026-11-09","epss":0.00452,"percentile":0.39495}],"risk":0.22599999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-30999"},"relatedVulnerabilities":[{"id":"CVE-2026-30999","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-30999","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30999","date":"2026-11-09","epss":0.00452,"percentile":0.39495}],"urls":["https://excellent-oatmeal-319.notion.site/CVE-2026-30999-Memory-Leak-e0d88ac53e2e42c1b5ef9aa3497e27b6","https://ffmpeg.org/doxygen/7.0/zmqsend_8c_source.html","https://github.com/FFmpeg/FFmpeg/blob/master/tools/zmqsend.c","https://www.ffmpeg.org/download.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-30999","description":"A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input."}]},{"artifact":{"id":"750d0316e4cb0212","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.7.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.7.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=expat","type":"deb","version":"2.7.4-1ubuntu0.2","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115506","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"expat","version":"2.7.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-115506","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-115506","cwe":"CWE-776","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-115506","date":"2026-11-09","epss":0.00448,"percentile":0.39218}],"risk":0.22399999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-115506"},"relatedVulnerabilities":[{"id":"CVE-2026-115506","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115506","cwe":"CWE-776","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-115506","date":"2026-11-09","epss":0.00448,"percentile":0.39218}],"urls":["https://github.com/hannob/lololol","https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/issues/1160","https://github.com/libexpat/libexpat/pull/1433","https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115506","description":"libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nested entity expansions to consume tens of seconds of CPU per parse."}]},{"artifact":{"id":"504ef2bce88b9f7c","cpes":["cpe:2.3:a:x11vnc:x11vnc:0.9.17-2:*:*:*:*:*:*:*"],"name":"x11vnc","purl":"pkg:deb/ubuntu/x11vnc@0.9.17-2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"0.9.17-2","language":"","licenses":["GPL-2","GPL-2.0+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/x11vnc/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/x11vnc/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/x11vnc.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/x11vnc.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/x11vnc.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/x11vnc.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-32853","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"x11vnc","version":"0.9.17-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-32853","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-32853","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-32853","date":"2026-11-09","epss":0.00445,"percentile":0.38946}],"risk":0.2225,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-32853"},"relatedVulnerabilities":[{"id":"CVE-2026-32853","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-32853","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-32853","date":"2026-11-09","epss":0.00445,"percentile":0.38946}],"urls":["https://github.com/LibVNC/libvncserver/commit/009008e2f4d5a54dd71f422070df3af7b3dbc931","https://github.com/LibVNC/libvncserver/security/advisories/GHSA-87q7-v983-qwcj","https://www.vulncheck.com/advisories/libvncserver-ultrazip-encoding-heap-out-of-bounds-read"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-32853","description":"LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server to cause information disclosure or application crash. Attackers can exploit improper bounds checking in the HandleUltraZipBPP() function by manipulating subrectangle header counts to read beyond the allocated heap buffer."}]},{"artifact":{"id":"4c2c2b9acb3996f5","cpes":["cpe:2.3:a:cpp:cpp:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*"],"name":"cpp","purl":"pkg:deb/ubuntu/cpp@4%3A15.2.0-5ubuntu1?arch=amd64&distro=ubuntu-26.04&upstream=gcc-defaults%401.230ubuntu1","type":"deb","version":"4:15.2.0-5ubuntu1","language":"","licenses":["BSD-4-Clause","GPL-2.0-or-later"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/cpp-x86-64-linux-gnu/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/cpp/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp.list","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.list"},{"path":"/var/lib/dpkg/info/cpp.postinst","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.postinst"},{"path":"/var/lib/dpkg/info/cpp.postrm","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.postrm"},{"path":"/var/lib/dpkg/info/cpp.preinst","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.preinst"},{"path":"/var/lib/dpkg/info/cpp.prerm","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.prerm"}],"upstreams":[{"name":"gcc-defaults","version":"1.230ubuntu1"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gcc-defaults","version":"1.230ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-09","epss":0.00444,"percentile":0.38869}],"risk":0.22200000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-95619"},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-09","epss":0.00444,"percentile":0.38869}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"493d4c4e9b5d7374","cpes":["cpe:2.3:a:cpp-x86-64-linux-gnu:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64-linux-gnu:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux_gnu:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux_gnu:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64-linux:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64-linux:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*"],"name":"cpp-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/cpp-x86-64-linux-gnu@4%3A15.2.0-5ubuntu1?arch=amd64&distro=ubuntu-26.04&upstream=gcc-defaults%401.230ubuntu1","type":"deb","version":"4:15.2.0-5ubuntu1","language":"","licenses":["BSD-4-Clause","GPL-2.0-or-later"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/cpp-x86-64-linux-gnu/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/cpp-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.list","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-defaults","version":"1.230ubuntu1"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gcc-defaults","version":"1.230ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-09","epss":0.00444,"percentile":0.38869}],"risk":0.22200000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-95619"},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-09","epss":0.00444,"percentile":0.38869}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-9951","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-9951","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-9951","cwe":"CWE-122","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2025-9951","date":"2026-11-09","epss":0.00443,"percentile":0.388}],"risk":0.2215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-9951"},"relatedVulnerabilities":[{"id":"CVE-2025-9951","cvss":[{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9951","cwe":"CWE-122","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2025-9951","date":"2026-11-09","epss":0.00443,"percentile":0.388}],"urls":["https://github.com/google/security-research/security/advisories/GHSA-39q3-f8jq-v6mg"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9951","description":"A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-9951","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-9951","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-9951","cwe":"CWE-122","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2025-9951","date":"2026-11-09","epss":0.00443,"percentile":0.388}],"risk":0.2215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-9951"},"relatedVulnerabilities":[{"id":"CVE-2025-9951","cvss":[{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9951","cwe":"CWE-122","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2025-9951","date":"2026-11-09","epss":0.00443,"percentile":0.388}],"urls":["https://github.com/google/security-research/security/advisories/GHSA-39q3-f8jq-v6mg"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9951","description":"A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-9951","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-9951","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-9951","cwe":"CWE-122","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2025-9951","date":"2026-11-09","epss":0.00443,"percentile":0.388}],"risk":0.2215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-9951"},"relatedVulnerabilities":[{"id":"CVE-2025-9951","cvss":[{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9951","cwe":"CWE-122","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2025-9951","date":"2026-11-09","epss":0.00443,"percentile":0.388}],"urls":["https://github.com/google/security-research/security/advisories/GHSA-39q3-f8jq-v6mg"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9951","description":"A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel definition cdef atom of JPEG2000."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-09","epss":0.00441,"percentile":0.38585}],"risk":0.2205,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-09","epss":0.00441,"percentile":0.38585}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-09","epss":0.00441,"percentile":0.38585}],"risk":0.2205,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-09","epss":0.00441,"percentile":0.38585}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"cd714f2b10ca1a58","cpes":["cpe:2.3:a:perl-base:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.40.1-7ubuntu0.3?arch=amd64&distro=ubuntu-26.04&upstream=perl","type":"deb","version":"5.40.1-7ubuntu0.3","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","FSFAP","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","LGPL-2.1","REGCOMP","REGCOMP,","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/perl-base.list"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-48962","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"perl","version":"5.40.1-7ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-48962","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-48962","cwe":"CWE-95","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-48962","cwe":"CWE-94","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-48962","date":"2026-11-09","epss":0.00439,"percentile":0.38461}],"risk":0.2195,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-48962"},"relatedVulnerabilities":[{"id":"CVE-2026-48962","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48962","cwe":"CWE-95","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-48962","cwe":"CWE-94","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-48962","date":"2026-11-09","epss":0.00439,"percentile":0.38461}],"urls":["https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610.patch","https://metacpan.org/release/PMQS/IO-Compress-2.220/changes","http://www.openwall.com/lists/oss-security/2026/05/27/4","https://access.redhat.com/errata/RHSA-2026:29182","https://access.redhat.com/errata/RHSA-2026:29210","https://access.redhat.com/errata/RHSA-2026:29867","https://access.redhat.com/errata/RHSA-2026:29941","https://access.redhat.com/errata/RHSA-2026:30085","https://access.redhat.com/errata/RHSA-2026:30086","https://access.redhat.com/errata/RHSA-2026:30115","https://access.redhat.com/errata/RHSA-2026:30843","https://access.redhat.com/errata/RHSA-2026:30851","https://access.redhat.com/errata/RHSA-2026:30858","https://access.redhat.com/errata/RHSA-2026:30859","https://access.redhat.com/errata/RHSA-2026:30860","https://access.redhat.com/errata/RHSA-2026:50262","https://access.redhat.com/security/cve/CVE-2026-48962","https://bugzilla.redhat.com/show_bug.cgi?id=2481767","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48962.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48962","description":"IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.\n\n_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.\n\nArbitrary Perl in the output glob executes at the calling process's privilege."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6385","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-6385","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6385","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6385","date":"2026-11-09","epss":0.00437,"percentile":0.3824}],"risk":0.2185,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6385"},"relatedVulnerabilities":[{"id":"CVE-2026-6385","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6385","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6385","date":"2026-11-09","epss":0.00437,"percentile":0.3824}],"urls":["https://access.redhat.com/security/cve/CVE-2026-6385","https://bugzilla.redhat.com/show_bug.cgi?id=2458764"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6385","description":"A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious DVD subtitle stream. This vulnerability is caused by a signed integer overflow in the DVD subtitle parser's fragment reassembly bounds checks, leading to a heap out-of-bounds write. Successful exploitation can result in a denial of service (DoS) due to an application crash, and potentially lead to arbitrary code execution."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6385","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-6385","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6385","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6385","date":"2026-11-09","epss":0.00437,"percentile":0.3824}],"risk":0.2185,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6385"},"relatedVulnerabilities":[{"id":"CVE-2026-6385","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6385","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6385","date":"2026-11-09","epss":0.00437,"percentile":0.3824}],"urls":["https://access.redhat.com/security/cve/CVE-2026-6385","https://bugzilla.redhat.com/show_bug.cgi?id=2458764"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6385","description":"A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious DVD subtitle stream. This vulnerability is caused by a signed integer overflow in the DVD subtitle parser's fragment reassembly bounds checks, leading to a heap out-of-bounds write. Successful exploitation can result in a denial of service (DoS) due to an application crash, and potentially lead to arbitrary code execution."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6385","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-6385","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6385","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6385","date":"2026-11-09","epss":0.00437,"percentile":0.3824}],"risk":0.2185,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6385"},"relatedVulnerabilities":[{"id":"CVE-2026-6385","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6385","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6385","date":"2026-11-09","epss":0.00437,"percentile":0.3824}],"urls":["https://access.redhat.com/security/cve/CVE-2026-6385","https://bugzilla.redhat.com/show_bug.cgi?id=2458764"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6385","description":"A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious DVD subtitle stream. This vulnerability is caused by a signed integer overflow in the DVD subtitle parser's fragment reassembly bounds checks, leading to a heap out-of-bounds write. Successful exploitation can result in a denial of service (DoS) due to an application crash, and potentially lead to arbitrary code execution."}]},{"artifact":{"id":"8077d30e416cb101","cpes":["cpe:2.3:a:libtiff6:libtiff6:4.7.0-3ubuntu5:*:*:*:*:*:*:*"],"name":"libtiff6","purl":"pkg:deb/ubuntu/libtiff6@4.7.0-3ubuntu5?arch=amd64&distro=ubuntu-26.04&upstream=tiff","type":"deb","version":"4.7.0-3ubuntu5","language":"","licenses":["Hylafax"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtiff6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libtiff6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtiff6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libtiff6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"tiff"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-12912","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"tiff","version":"4.7.0-3ubuntu5"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-12912","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-12912","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-12912","cwe":"CWE-122","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-12912","date":"2026-11-09","epss":0.00433,"percentile":0.37818}],"risk":0.21649999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-12912"},"relatedVulnerabilities":[{"id":"CVE-2026-12912","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12912","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-12912","cwe":"CWE-122","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-12912","date":"2026-11-09","epss":0.00433,"percentile":0.37818}],"urls":["https://access.redhat.com/errata/RHSA-2026:34890","https://access.redhat.com/errata/RHSA-2026:41892","https://access.redhat.com/errata/RHSA-2026:42668","https://access.redhat.com/errata/RHSA-2026:47183","https://access.redhat.com/errata/RHSA-2026:47184","https://access.redhat.com/errata/RHSA-2026:49671","https://access.redhat.com/errata/RHSA-2026:50774","https://access.redhat.com/errata/RHSA-2026:54638","https://access.redhat.com/errata/RHSA-2026:54640","https://access.redhat.com/errata/RHSA-2026:54642","https://access.redhat.com/errata/RHSA-2026:58545","https://access.redhat.com/errata/RHSA-2026:58553","https://access.redhat.com/errata/RHSA-2026:58554","https://access.redhat.com/errata/RHSA-2026:58556","https://access.redhat.com/errata/RHSA-2026:61657","https://access.redhat.com/errata/RHSA-2026:69292","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:83550","https://access.redhat.com/security/cve/CVE-2026-12912","https://bugzilla.redhat.com/show_bug.cgi?id=2492871","https://gitlab.com/libtiff/libtiff/-/merge_requests/873","https://gitlab.com/libtiff/libtiff/-/work_items/824","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12912.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12912","description":"A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS)."}]},{"artifact":{"id":"a9f6d48ce9c731f4","cpes":["cpe:2.3:a:dirmngr:dirmngr:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*"],"name":"dirmngr","purl":"pkg:deb/ubuntu/dirmngr@2.4.8-4ubuntu3.1?arch=amd64&distro=ubuntu-26.04&upstream=gnupg2","type":"deb","version":"2.4.8-4ubuntu3.1","language":"","licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-2+","GPL-2.0","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/dirmngr/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/dirmngr/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/dirmngr.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/dirmngr.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/dirmngr.list","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/dirmngr.list"},{"path":"/var/lib/dpkg/info/dirmngr.postinst","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/dirmngr.postinst"},{"path":"/var/lib/dpkg/info/dirmngr.postrm","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/dirmngr.postrm"},{"path":"/var/lib/dpkg/info/dirmngr.preinst","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/dirmngr.preinst"},{"path":"/var/lib/dpkg/info/dirmngr.prerm","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/dirmngr.prerm"}],"upstreams":[{"name":"gnupg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-118131","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnupg2","version":"2.4.8-4ubuntu3.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-118131","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"risk":0.215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-118131"},"relatedVulnerabilities":[{"id":"CVE-2026-118131","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"urls":["https://atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testing"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118131","description":"GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\\ProgramData directory allows members of the BUILTIN\\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user."}]},{"artifact":{"id":"b1a33715a40c7c03","cpes":["cpe:2.3:a:gnupg:gnupg:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*"],"name":"gnupg","purl":"pkg:deb/ubuntu/gnupg@2.4.8-4ubuntu3.1?arch=all&distro=ubuntu-26.04&upstream=gnupg2","type":"deb","version":"2.4.8-4ubuntu3.1","language":"","licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-2+","GPL-2.0","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gnupg/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/gnupg/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gnupg.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gnupg.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gnupg.list","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gnupg.list"}],"upstreams":[{"name":"gnupg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-118131","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnupg2","version":"2.4.8-4ubuntu3.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-118131","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"risk":0.215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-118131"},"relatedVulnerabilities":[{"id":"CVE-2026-118131","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"urls":["https://atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testing"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118131","description":"GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\\ProgramData directory allows members of the BUILTIN\\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user."}]},{"artifact":{"id":"9716ea86d4d06178","cpes":["cpe:2.3:a:gnupg2:gnupg2:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*"],"name":"gnupg2","purl":"pkg:deb/ubuntu/gnupg2@2.4.8-4ubuntu3.1?arch=all&distro=ubuntu-26.04","type":"deb","version":"2.4.8-4ubuntu3.1","language":"","licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-2+","GPL-2.0","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gnupg2/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/gnupg2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gnupg2.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gnupg2.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gnupg2.list","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gnupg2.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-118131","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnupg2","version":"2.4.8-4ubuntu3.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-118131","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"risk":0.215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-118131"},"relatedVulnerabilities":[{"id":"CVE-2026-118131","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"urls":["https://atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testing"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118131","description":"GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\\ProgramData directory allows members of the BUILTIN\\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user."}]},{"artifact":{"id":"be6a093bf9acfc4c","cpes":["cpe:2.3:a:gpg:gpg:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*"],"name":"gpg","purl":"pkg:deb/ubuntu/gpg@2.4.8-4ubuntu3.1?arch=amd64&distro=ubuntu-26.04&upstream=gnupg2","type":"deb","version":"2.4.8-4ubuntu3.1","language":"","licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-2+","GPL-2.0","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gpg/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/gpg/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gpg.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpg.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gpg.list","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpg.list"},{"path":"/var/lib/dpkg/info/gpg.postinst","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpg.postinst"},{"path":"/var/lib/dpkg/info/gpg.postrm","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpg.postrm"}],"upstreams":[{"name":"gnupg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-118131","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnupg2","version":"2.4.8-4ubuntu3.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-118131","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"risk":0.215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-118131"},"relatedVulnerabilities":[{"id":"CVE-2026-118131","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"urls":["https://atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testing"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118131","description":"GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\\ProgramData directory allows members of the BUILTIN\\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user."}]},{"artifact":{"id":"2388ee342297a7b0","cpes":["cpe:2.3:a:gpg-agent:gpg-agent:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*","cpe:2.3:a:gpg-agent:gpg_agent:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*","cpe:2.3:a:gpg_agent:gpg-agent:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*","cpe:2.3:a:gpg_agent:gpg_agent:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*","cpe:2.3:a:gpg:gpg-agent:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*","cpe:2.3:a:gpg:gpg_agent:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*"],"name":"gpg-agent","purl":"pkg:deb/ubuntu/gpg-agent@2.4.8-4ubuntu3.1?arch=amd64&distro=ubuntu-26.04&upstream=gnupg2","type":"deb","version":"2.4.8-4ubuntu3.1","language":"","licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-2+","GPL-2.0","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gpg-agent/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/gpg-agent/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gpg-agent.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpg-agent.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gpg-agent.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpg-agent.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gpg-agent.list","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpg-agent.list"},{"path":"/var/lib/dpkg/info/gpg-agent.postinst","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpg-agent.postinst"},{"path":"/var/lib/dpkg/info/gpg-agent.postrm","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpg-agent.postrm"}],"upstreams":[{"name":"gnupg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-118131","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnupg2","version":"2.4.8-4ubuntu3.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-118131","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"risk":0.215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-118131"},"relatedVulnerabilities":[{"id":"CVE-2026-118131","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"urls":["https://atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testing"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118131","description":"GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\\ProgramData directory allows members of the BUILTIN\\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user."}]},{"artifact":{"id":"25fceca8dc2b598a","cpes":["cpe:2.3:a:gpgconf:gpgconf:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*"],"name":"gpgconf","purl":"pkg:deb/ubuntu/gpgconf@2.4.8-4ubuntu3.1?arch=amd64&distro=ubuntu-26.04&upstream=gnupg2","type":"deb","version":"2.4.8-4ubuntu3.1","language":"","licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-2+","GPL-2.0","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gpgconf/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/gpgconf/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gpgconf.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpgconf.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gpgconf.list","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpgconf.list"}],"upstreams":[{"name":"gnupg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-118131","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnupg2","version":"2.4.8-4ubuntu3.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-118131","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"risk":0.215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-118131"},"relatedVulnerabilities":[{"id":"CVE-2026-118131","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"urls":["https://atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testing"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118131","description":"GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\\ProgramData directory allows members of the BUILTIN\\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user."}]},{"artifact":{"id":"b654978f2f243485","cpes":["cpe:2.3:a:gpgsm:gpgsm:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*"],"name":"gpgsm","purl":"pkg:deb/ubuntu/gpgsm@2.4.8-4ubuntu3.1?arch=amd64&distro=ubuntu-26.04&upstream=gnupg2","type":"deb","version":"2.4.8-4ubuntu3.1","language":"","licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-2+","GPL-2.0","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gpgsm/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/gpgsm/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gpgsm.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpgsm.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gpgsm.list","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/gpgsm.list"}],"upstreams":[{"name":"gnupg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-118131","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnupg2","version":"2.4.8-4ubuntu3.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-118131","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"risk":0.215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-118131"},"relatedVulnerabilities":[{"id":"CVE-2026-118131","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"urls":["https://atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testing"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118131","description":"GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\\ProgramData directory allows members of the BUILTIN\\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user."}]},{"artifact":{"id":"4fa7527a29b6d3cf","cpes":["cpe:2.3:a:gpgv:gpgv:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*"],"name":"gpgv","purl":"pkg:deb/ubuntu/gpgv@2.4.8-4ubuntu3.1?arch=amd64&distro=ubuntu-26.04&upstream=gnupg2","type":"deb","version":"2.4.8-4ubuntu3.1","language":"","licenses":["BSD-3-clause","CC0-1.0","Expat","GPL-2+","GPL-2.0","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","RFC-Reference","TinySCHEME","permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gpgv/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/gpgv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gpgv.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/gpgv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gpgv.list","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/gpgv.list"}],"upstreams":[{"name":"gnupg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-118131","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnupg2","version":"2.4.8-4ubuntu3.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-118131","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"risk":0.215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-118131"},"relatedVulnerabilities":[{"id":"CVE-2026-118131","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118131","cwe":"CWE-379","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-427","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-118131","cwe":"CWE-732","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-118131","date":"2026-11-09","epss":0.0043,"percentile":0.37514}],"urls":["https://atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testing"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118131","description":"GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\\ProgramData directory allows members of the BUILTIN\\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user."}]},{"artifact":{"id":"750d0316e4cb0212","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.7.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.7.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=expat","type":"deb","version":"2.7.4-1ubuntu0.2","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-117610","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"expat","version":"2.7.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-117610","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-117610","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-117610","date":"2026-11-09","epss":0.00425,"percentile":0.37095}],"risk":0.21250000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-117610"},"relatedVulnerabilities":[{"id":"CVE-2026-117610","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-117610","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-117610","date":"2026-11-09","epss":0.00425,"percentile":0.37095}],"urls":["https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510","https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d","https://github.com/libexpat/libexpat/pull/1444","https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-117610","description":"libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty input. Attackers who control stream chunking can force an empty non-final first parse on an external entity subparser, causing a later parse to crash the application."}]},{"artifact":{"id":"e621b8e011c3dd21","cpes":["cpe:2.3:a:libcups2t64:libcups2t64:2.4.16-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"libcups2t64","purl":"pkg:deb/ubuntu/libcups2t64@2.4.16-1ubuntu1.3?arch=amd64&distro=ubuntu-26.04&upstream=cups","type":"deb","version":"2.4.16-1ubuntu1.3","language":"","licenses":["Apache-2.0","Apache-2.0-with-GPL2-LGPL2-Exception","BSD-2-Clause","FSFUL","Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcups2t64/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libcups2t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcups2t64:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libcups2t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cups"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-61702","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"cups","version":"2.4.16-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-61702","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-61702","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-61702","date":"2026-11-09","epss":0.00424,"percentile":0.37005}],"risk":0.212,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-61702"},"relatedVulnerabilities":[{"id":"CVE-2026-61702","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-61702","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-61702","date":"2026-11-09","epss":0.00424,"percentile":0.37005}],"urls":["https://github.com/OpenPrinting/cups/commit/08a8a277ce2a8948a1af33552247a1ac53b72df3","https://github.com/OpenPrinting/cups/commit/6650428234616a97d3298e0e2d4419c62c1339d2","https://github.com/OpenPrinting/cups/releases/tag/v2.4.20","https://github.com/OpenPrinting/cups/security/advisories/GHSA-gq9p-4w7m-2f5g"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-61702","description":"OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_banner() in scheduler/ipp.c uses the attacker-controlled IPP attributes-natural-language value as a directory component beneath DataDir/banners when processing a job-sheets banner. The job-sheets value must first match a registered banner basename, and the traversed path must contain a matching reachable basename; selecting an arbitrary target as demonstrated additionally requires pre-positioned path state such as a symlink with that basename. Subject to the scheduler's filesystem and sandbox access, path separators in the language value can escape the intended banner directory, make the root scheduler open the reachable file, and copy its bytes into a job-sheet spool object that a configured backend can deliver to an attacker-observable endpoint. This issue is fixed in version 2.4.20."}]},{"artifact":{"id":"a14a21eb8bcc5f1a","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.22.1-2ubuntu4.1?arch=amd64&distro=ubuntu-26.04&upstream=krb5","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-09","epss":0.00424,"percentile":0.36992}],"risk":0.212,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107778"},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-09","epss":0.00424,"percentile":0.36992}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"d43699c9cd5719fa","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.22.1-2ubuntu4.1?arch=amd64&distro=ubuntu-26.04&upstream=krb5","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-09","epss":0.00424,"percentile":0.36992}],"risk":0.212,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107778"},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-09","epss":0.00424,"percentile":0.36992}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"e0334529fa08f0c3","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.22.1-2ubuntu4.1?arch=amd64&distro=ubuntu-26.04&upstream=krb5","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-09","epss":0.00424,"percentile":0.36992}],"risk":0.212,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107778"},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-09","epss":0.00424,"percentile":0.36992}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"7ab07b2789627097","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.22.1-2ubuntu4.1?arch=amd64&distro=ubuntu-26.04&upstream=krb5","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-09","epss":0.00424,"percentile":0.36992}],"risk":0.212,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107778"},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-09","epss":0.00424,"percentile":0.36992}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-90815","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90815","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90815","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90815","cwe":"CWE-125","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90815","date":"2026-11-09","epss":0.00422,"percentile":0.36832}],"risk":0.211,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90815"},"relatedVulnerabilities":[{"id":"CVE-2026-90815","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90815","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90815","cwe":"CWE-125","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90815","date":"2026-11-09","epss":0.00422,"percentile":0.36832}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/8970658472d1","https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21487","https://ffmpeg.org/","https://vuldb.com/cve/CVE-2026-90815","https://vuldb.com/submit/922609","https://vuldb.com/vuln/403317","https://vuldb.com/vuln/403317/cti"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90815","description":"A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup_3x3 of the file libavfilter/vf_convolution.c of the component Convolution Filter. Such manipulation leads to out-of-bounds read. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.4.7, 5.1.9, 6.1.5, 7.1.4, 8.0.2, 8.1.1 and 9.0 can resolve this issue. The name of the patch is 8970658472/e24b9820b4. It is suggested to upgrade the affected component."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-90815","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90815","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90815","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90815","cwe":"CWE-125","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90815","date":"2026-11-09","epss":0.00422,"percentile":0.36832}],"risk":0.211,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90815"},"relatedVulnerabilities":[{"id":"CVE-2026-90815","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90815","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90815","cwe":"CWE-125","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90815","date":"2026-11-09","epss":0.00422,"percentile":0.36832}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/8970658472d1","https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21487","https://ffmpeg.org/","https://vuldb.com/cve/CVE-2026-90815","https://vuldb.com/submit/922609","https://vuldb.com/vuln/403317","https://vuldb.com/vuln/403317/cti"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90815","description":"A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup_3x3 of the file libavfilter/vf_convolution.c of the component Convolution Filter. Such manipulation leads to out-of-bounds read. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.4.7, 5.1.9, 6.1.5, 7.1.4, 8.0.2, 8.1.1 and 9.0 can resolve this issue. The name of the patch is 8970658472/e24b9820b4. It is suggested to upgrade the affected component."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-90815","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90815","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90815","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90815","cwe":"CWE-125","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90815","date":"2026-11-09","epss":0.00422,"percentile":0.36832}],"risk":0.211,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90815"},"relatedVulnerabilities":[{"id":"CVE-2026-90815","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90815","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90815","cwe":"CWE-125","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90815","date":"2026-11-09","epss":0.00422,"percentile":0.36832}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/8970658472d1","https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21487","https://ffmpeg.org/","https://vuldb.com/cve/CVE-2026-90815","https://vuldb.com/submit/922609","https://vuldb.com/vuln/403317","https://vuldb.com/vuln/403317/cti"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90815","description":"A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup_3x3 of the file libavfilter/vf_convolution.c of the component Convolution Filter. Such manipulation leads to out-of-bounds read. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.4.7, 5.1.9, 6.1.5, 7.1.4, 8.0.2, 8.1.1 and 9.0 can resolve this issue. The name of the patch is 8970658472/e24b9820b4. It is suggested to upgrade the affected component."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83408","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83408","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83408","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83408","date":"2026-11-09","epss":0.00421,"percentile":0.36696}],"risk":0.21050000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83408"},"relatedVulnerabilities":[{"id":"CVE-2026-83408","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83408","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83408","date":"2026-11-09","epss":0.00421,"percentile":0.36696}],"urls":["https://www.oracle.com/security-alerts/cspusep2026.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83408","description":"Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler).   The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1;  Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM for JDK, Oracle GraalVM.  Successful attacks of this vulnerability can result in takeover of Oracle GraalVM for JDK, Oracle GraalVM. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83408","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83408","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83408","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83408","date":"2026-11-09","epss":0.00421,"percentile":0.36696}],"risk":0.21050000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83408"},"relatedVulnerabilities":[{"id":"CVE-2026-83408","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83408","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83408","date":"2026-11-09","epss":0.00421,"percentile":0.36696}],"urls":["https://www.oracle.com/security-alerts/cspusep2026.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83408","description":"Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler).   The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1;  Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM for JDK, Oracle GraalVM.  Successful attacks of this vulnerability can result in takeover of Oracle GraalVM for JDK, Oracle GraalVM. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91394","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91394","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91394","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91394","date":"2026-11-09","epss":0.00419,"percentile":0.36508}],"risk":0.20950000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91394"},"relatedVulnerabilities":[{"id":"CVE-2026-91394","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91394","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91394","date":"2026-11-09","epss":0.00419,"percentile":0.36508}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91394","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91394","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91394","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91394","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91394","date":"2026-11-09","epss":0.00419,"percentile":0.36508}],"risk":0.20950000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91394"},"relatedVulnerabilities":[{"id":"CVE-2026-91394","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91394","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91394","date":"2026-11-09","epss":0.00419,"percentile":0.36508}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91394","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"581b17625638f290","cpes":["cpe:2.3:a:libspeex1:libspeex1:1.2.1-3build1:*:*:*:*:*:*:*"],"name":"libspeex1","purl":"pkg:deb/ubuntu/libspeex1@1.2.1-3build1?arch=amd64&distro=ubuntu-26.04&upstream=speex","type":"deb","version":"1.2.1-3build1","language":"","licenses":["BSD-3-Clause","GFDL-1.1-or-later","GFDL-1.2","LGPL-2","LGPL-2.0-or-later","custom-1"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libspeex1/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libspeex1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libspeex1:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libspeex1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"speex"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116741","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"speex","version":"1.2.1-3build1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-116741","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-116741","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-116741","date":"2026-11-09","epss":0.00418,"percentile":0.36389}],"risk":0.209,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-116741"},"relatedVulnerabilities":[{"id":"CVE-2026-116741","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116741","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-116741","date":"2026-11-09","epss":0.00418,"percentile":0.36389}],"urls":["https://github.com/xiph/speex","https://github.com/xiph/speex/blob/Speex-1.2.1/libspeex/bits.c#L177","https://github.com/xiph/speex/issues/42","https://gitlab.xiph.org/xiph/speex/-/merge_requests/32","https://hackmd.io/@haindpwn/speex-bits-read-whole-bytes-oob-write","https://www.vulncheck.com/advisories/speex-through-1.2.1-out-of-bounds-write-via-speex-bits-read-whole-bytes","https://hackmd.io/@haindpwn/cve-2026-116741-speex-bits-read-whole-bytes-oob-write"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116741","description":"Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in libspeex/bits.c that mishandles length truncation for non-owned SpeexBits buffers. Attackers can stream crafted Speex data into buffers set up with speex_bits_init_buffer() or speex_bits_set_bit_buffer() to corrupt heap or stack memory and crash applications."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-25473","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-25473","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-25473","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25473","date":"2026-11-09","epss":0.00416,"percentile":0.36174}],"risk":0.208,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-25473"},"relatedVulnerabilities":[{"id":"CVE-2025-25473","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-25473","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25473","date":"2026-11-09","epss":0.00416,"percentile":0.36174}],"urls":["https://git.ffmpeg.org/gitweb/ffmpeg.git/blobdiff/4f3c9f2f03378a08692a26532bc3146414717f8c..c08d300481b8ebb846cd43a473988fdbc6793d1b:/libavformat/avformat.c","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/c08d300481b8ebb846cd43a473988fdbc6793d1b","https://trac.ffmpeg.org/ticket/11419"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-25473","description":"FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformat_free_context function in libavutil/mem.c."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-25473","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-25473","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-25473","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25473","date":"2026-11-09","epss":0.00416,"percentile":0.36174}],"risk":0.208,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-25473"},"relatedVulnerabilities":[{"id":"CVE-2025-25473","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-25473","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25473","date":"2026-11-09","epss":0.00416,"percentile":0.36174}],"urls":["https://git.ffmpeg.org/gitweb/ffmpeg.git/blobdiff/4f3c9f2f03378a08692a26532bc3146414717f8c..c08d300481b8ebb846cd43a473988fdbc6793d1b:/libavformat/avformat.c","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/c08d300481b8ebb846cd43a473988fdbc6793d1b","https://trac.ffmpeg.org/ticket/11419"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-25473","description":"FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformat_free_context function in libavutil/mem.c."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-25473","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-25473","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-25473","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25473","date":"2026-11-09","epss":0.00416,"percentile":0.36174}],"risk":0.208,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-25473"},"relatedVulnerabilities":[{"id":"CVE-2025-25473","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-25473","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-25473","date":"2026-11-09","epss":0.00416,"percentile":0.36174}],"urls":["https://git.ffmpeg.org/gitweb/ffmpeg.git/blobdiff/4f3c9f2f03378a08692a26532bc3146414717f8c..c08d300481b8ebb846cd43a473988fdbc6793d1b:/libavformat/avformat.c","https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/c08d300481b8ebb846cd43a473988fdbc6793d1b","https://trac.ffmpeg.org/ticket/11419"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-25473","description":"FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformat_free_context function in libavutil/mem.c."}]},{"artifact":{"id":"c9501da40f045e06","cpes":["cpe:2.3:a:xdg-utils:xdg-utils:1.2.1-2ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:xdg-utils:xdg_utils:1.2.1-2ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:xdg_utils:xdg-utils:1.2.1-2ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:xdg_utils:xdg_utils:1.2.1-2ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:xdg:xdg-utils:1.2.1-2ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:xdg:xdg_utils:1.2.1-2ubuntu2:*:*:*:*:*:*:*"],"name":"xdg-utils","purl":"pkg:deb/ubuntu/xdg-utils@1.2.1-2ubuntu2?arch=all&distro=ubuntu-26.04","type":"deb","version":"1.2.1-2ubuntu2","language":"","licenses":["Expat"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xdg-utils/copyright","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/usr/share/doc/xdg-utils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xdg-utils.md5sums","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/info/xdg-utils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xdg-utils.list","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/info/xdg-utils.list"},{"path":"/var/lib/dpkg/info/xdg-utils.postinst","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/info/xdg-utils.postinst"},{"path":"/var/lib/dpkg/info/xdg-utils.prerm","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/info/xdg-utils.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-4055","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xdg-utils","version":"1.2.1-2ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2022-4055","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-4055","cwe":"CWE-146","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2022-4055","date":"2026-11-09","epss":0.00692,"percentile":0.53151}],"risk":0.20759999999999998,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-4055"},"relatedVulnerabilities":[{"id":"CVE-2022-4055","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-4055","cwe":"CWE-146","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2022-4055","date":"2026-11-09","epss":0.00692,"percentile":0.53151}],"urls":["https://gitlab.freedesktop.org/xdg/xdg-utils/-/issues/205#note_1494267"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-4055","description":"When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird that should not be included per RFC 2368. An attacker can use this method to create a mailto URL that looks safe to users, but will actually attach files when clicked."}]},{"artifact":{"id":"60af6de63c33b882","cpes":["cpe:2.3:a:python3-pip-whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*"],"name":"python3-pip-whl","purl":"pkg:deb/ubuntu/python3-pip-whl@25.1.1%2Bdfsg-1ubuntu2?arch=all&distro=ubuntu-26.04&upstream=python-pip","type":"deb","version":"25.1.1+dfsg-1ubuntu2","language":"","licenses":["Apache-2.0","BSD-2","BSD-3","Expat","ISC","MPL-2","MPL-2.0","Python"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-pip-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-pip-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.list"}],"upstreams":[{"name":"python-pip"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45409","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python-pip","version":"25.1.1+dfsg-1ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-45409","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-45409","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-45409","date":"2026-11-09","epss":0.00408,"percentile":0.35364}],"risk":0.20400000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-45409"},"relatedVulnerabilities":[{"id":"CVE-2026-45409","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45409","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-45409","date":"2026-11-09","epss":0.00408,"percentile":0.35364}],"urls":["https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45409","description":"Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `\"\\u0660\" * N` or `\"\\u30fb\" * N + \"\\u6f22\"` utilize the `valid_contexto` function prior to length rejection, and for high values of `N` will take a long time to process. This is the same issue as CVE-2024-3651, however the original remediation in 2024 was not a complete fix. A specially crafted argument to the `idna.encode()` function could consume significant resources. This may lead to a denial-of-service. Starting in version 3.14, the function rejects long inputs as soon as practicable prior to any further processing to minimize resource consumption. In version 3.15, this approach was extended to lesser used alternate functions (i.e. per-label conversions and codec support). A workaround is available. Domain names cannot exceed 253 characters in length. If this length limit is enforced prior to passing the domain to the `idna.encode()` function, it should no longer consume significant resources. This is triggered by arbitrarily large inputs that would not occur in normal usage, but may be passed to the library assuming there is no preliminary input validation by the higher-level application."}]},{"artifact":{"id":"9bf8453cdf2cb781","cpes":["cpe:2.3:a:libjxl0.11:libjxl0.11:0.11.1-6ubuntu4.2:*:*:*:*:*:*:*"],"name":"libjxl0.11","purl":"pkg:deb/ubuntu/libjxl0.11@0.11.1-6ubuntu4.2?arch=amd64&distro=ubuntu-26.04&upstream=jpeg-xl","type":"deb","version":"0.11.1-6ubuntu4.2","language":"","licenses":["BSD-3-clause-Google","ISC-License"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libjxl0.11/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libjxl0.11/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libjxl0.11:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libjxl0.11:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"jpeg-xl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-82522","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"jpeg-xl","version":"0.11.1-6ubuntu4.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-82522","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-82522","cwe":"CWE-681","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-82522","date":"2026-11-09","epss":0.00407,"percentile":0.35286}],"risk":0.2035,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-82522"},"relatedVulnerabilities":[{"id":"CVE-2026-82522","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82522","cwe":"CWE-681","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-82522","date":"2026-11-09","epss":0.00407,"percentile":0.35286}],"urls":["https://github.com/libjxl/libjxl/commit/22ad80af1454f0444ea34115e49ed40517147d68","https://github.com/libjxl/libjxl/pull/4885","https://github.com/libjxl/libjxl/releases/tag/v0.12.0","https://www.vulncheck.com/advisories/libjxl-container-box-parser-integer-underflow-via-32-bit-size-truncation"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82522","description":"libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to size_t on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse attacker-controlled codestream bytes as phantom box headers, enabling injection of arbitrary metadata (Exif, XMP, IPTC, JUMBF) and potential out-of-bounds reads."}]},{"artifact":{"id":"a5e9bdd3f599e821","cpes":["cpe:2.3:a:libgdk-pixbuf-2.0-0:libgdk-pixbuf-2.0-0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk-pixbuf-2.0-0:libgdk_pixbuf_2.0_0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk_pixbuf_2.0_0:libgdk-pixbuf-2.0-0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk_pixbuf_2.0_0:libgdk_pixbuf_2.0_0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk-pixbuf-2.0:libgdk-pixbuf-2.0-0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk-pixbuf-2.0:libgdk_pixbuf_2.0_0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk_pixbuf_2.0:libgdk-pixbuf-2.0-0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk_pixbuf_2.0:libgdk_pixbuf_2.0_0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk-pixbuf:libgdk-pixbuf-2.0-0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk-pixbuf:libgdk_pixbuf_2.0_0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk_pixbuf:libgdk-pixbuf-2.0-0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk_pixbuf:libgdk_pixbuf_2.0_0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk:libgdk-pixbuf-2.0-0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk:libgdk_pixbuf_2.0_0:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*"],"name":"libgdk-pixbuf-2.0-0","purl":"pkg:deb/ubuntu/libgdk-pixbuf-2.0-0@2.44.5%2Bdfsg-4ubuntu1?arch=amd64&distro=ubuntu-26.04&upstream=gdk-pixbuf","type":"deb","version":"2.44.5+dfsg-4ubuntu1","language":"","licenses":["CC0-1.0","GPL-2","GPL-2+","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgdk-pixbuf-2.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libgdk-pixbuf-2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgdk-pixbuf-2.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libgdk-pixbuf-2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gdk-pixbuf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-16768","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gdk-pixbuf","version":"2.44.5+dfsg-4ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-16768","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-16768","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-16768","date":"2026-11-09","epss":0.00405,"percentile":0.35079}],"risk":0.20249999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-16768"},"relatedVulnerabilities":[{"id":"CVE-2026-16768","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16768","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-16768","date":"2026-11-09","epss":0.00405,"percentile":0.35079}],"urls":["https://access.redhat.com/security/cve/CVE-2026-16768","https://bugzilla.redhat.com/show_bug.cgi?id=2506437","https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/302"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-16768","description":"A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail."}]},{"artifact":{"id":"e26118afa843e06e","cpes":["cpe:2.3:a:libgdk-pixbuf2.0-common:libgdk-pixbuf2.0-common:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk-pixbuf2.0-common:libgdk_pixbuf2.0_common:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk_pixbuf2.0_common:libgdk-pixbuf2.0-common:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk_pixbuf2.0_common:libgdk_pixbuf2.0_common:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk-pixbuf2.0:libgdk-pixbuf2.0-common:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk-pixbuf2.0:libgdk_pixbuf2.0_common:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk_pixbuf2.0:libgdk-pixbuf2.0-common:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk_pixbuf2.0:libgdk_pixbuf2.0_common:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk:libgdk-pixbuf2.0-common:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libgdk:libgdk_pixbuf2.0_common:2.44.5\\+dfsg-4ubuntu1:*:*:*:*:*:*:*"],"name":"libgdk-pixbuf2.0-common","purl":"pkg:deb/ubuntu/libgdk-pixbuf2.0-common@2.44.5%2Bdfsg-4ubuntu1?arch=all&distro=ubuntu-26.04&upstream=gdk-pixbuf","type":"deb","version":"2.44.5+dfsg-4ubuntu1","language":"","licenses":["CC0-1.0","GPL-2","GPL-2+","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgdk-pixbuf2.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libgdk-pixbuf2.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgdk-pixbuf2.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libgdk-pixbuf2.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgdk-pixbuf2.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libgdk-pixbuf2.0-common.list"}],"upstreams":[{"name":"gdk-pixbuf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-16768","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gdk-pixbuf","version":"2.44.5+dfsg-4ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-16768","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-16768","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-16768","date":"2026-11-09","epss":0.00405,"percentile":0.35079}],"risk":0.20249999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-16768"},"relatedVulnerabilities":[{"id":"CVE-2026-16768","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-16768","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-16768","date":"2026-11-09","epss":0.00405,"percentile":0.35079}],"urls":["https://access.redhat.com/security/cve/CVE-2026-16768","https://bugzilla.redhat.com/show_bug.cgi?id=2506437","https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/302"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-16768","description":"A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail."}]},{"artifact":{"id":"504ef2bce88b9f7c","cpes":["cpe:2.3:a:x11vnc:x11vnc:0.9.17-2:*:*:*:*:*:*:*"],"name":"x11vnc","purl":"pkg:deb/ubuntu/x11vnc@0.9.17-2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"0.9.17-2","language":"","licenses":["GPL-2","GPL-2.0+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/x11vnc/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/x11vnc/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/x11vnc.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/x11vnc.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/x11vnc.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/x11vnc.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-50538","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"x11vnc","version":"0.9.17-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-50538","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-50538","cwe":"CWE-122","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-50538","cwe":"CWE-787","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-50538","date":"2026-11-09","epss":0.00404,"percentile":0.34897}],"risk":0.202,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-50538"},"relatedVulnerabilities":[{"id":"CVE-2026-50538","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-50538","cwe":"CWE-122","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-50538","cwe":"CWE-787","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-50538","date":"2026-11-09","epss":0.00404,"percentile":0.34897}],"urls":["https://github.com/LibVNC/libvncserver/commit/540332be3e0acc566fa64da6f1b4680c72c724dd","https://github.com/LibVNC/libvncserver/security/advisories/GHSA-v9pm-47h4-jcq8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-50538","description":"LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious (or man-in-the-middle) VNC server can force a connecting `libvncclient` to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with attacker-controlled length, contents, and offset. It needs no authentication (the attacker\nis the server), works in a default build with default settings, and fires from a single `FramebufferUpdate` the moment the victim connects. It crashes any client unconditionally (denial of service); we also demonstrated it overwriting an application callback pointer and redirecting execution to attacker-chosen code (code execution) under the default configuration. Commit 540332be3e0acc566fa64da6f1b4680c72c724dd patches the issue."}]},{"artifact":{"id":"750d0316e4cb0212","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.7.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.7.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=expat","type":"deb","version":"2.7.4-1ubuntu0.2","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-93990","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"expat","version":"2.7.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-93990","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-93990","cwe":"CWE-176","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-93990","date":"2026-11-09","epss":0.00403,"percentile":0.34867}],"risk":0.20149999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-93990"},"relatedVulnerabilities":[{"id":"CVE-2026-93990","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93990","cwe":"CWE-176","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-93990","date":"2026-11-09","epss":0.00403,"percentile":0.34867}],"urls":["https://blog.hartwork.org/posts/expat-2-8-5-released/","https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/commit/ff6e1d7e750bbe245178f51a47a965dc8342861a","https://github.com/libexpat/libexpat/pull/1282","https://github.com/libexpat/libexpat/releases/tag/R_2_8_5","https://www.vulncheck.com/advisories/expat-through-2.8.4-malformed-utf-16-acceptance-via-unchecked-surrogate"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93990","description":"Expat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16 sequences to be accepted. Attackers can supply UTF-16 encoded XML containing lone high surrogates that consume the following code unit, causing Expat to pass unpaired surrogates to applications built with XML_UNICODE and to silently replace input characters in other builds."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-09","epss":0.00403,"percentile":0.34796}],"risk":0.20149999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-09","epss":0.00403,"percentile":0.34796}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-09","epss":0.00403,"percentile":0.34796}],"risk":0.20149999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-09","epss":0.00403,"percentile":0.34796}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66036","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-11-09","epss":0.00401,"percentile":0.34599}],"risk":0.20049999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66036"},"relatedVulnerabilities":[{"id":"CVE-2026-66036","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-11-09","epss":0.00401,"percentile":0.34599}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66036","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-11-09","epss":0.00401,"percentile":0.34599}],"risk":0.20049999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66036"},"relatedVulnerabilities":[{"id":"CVE-2026-66036","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-11-09","epss":0.00401,"percentile":0.34599}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66036","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66036","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-11-09","epss":0.00401,"percentile":0.34599}],"risk":0.20049999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66036"},"relatedVulnerabilities":[{"id":"CVE-2026-66036","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66036","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66036","date":"2026-11-09","epss":0.00401,"percentile":0.34599}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783","https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66036","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-30998","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-30998","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-30998","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30998","date":"2026-11-09","epss":0.004,"percentile":0.34485}],"risk":0.2,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-30998"},"relatedVulnerabilities":[{"id":"CVE-2026-30998","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-30998","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30998","date":"2026-11-09","epss":0.004,"percentile":0.34485}],"urls":["https://excellent-oatmeal-319.notion.site/CVE-2026-30998-Resource-Leak-3265a71f9cca4dc58df4632ce8b60a50","https://ffmpeg.org/doxygen/7.0/zmqsend_8c_source.html","https://github.com/FFmpeg/FFmpeg/blob/master/tools/zmqsend.c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-30998","description":"An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-30998","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-30998","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-30998","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30998","date":"2026-11-09","epss":0.004,"percentile":0.34485}],"risk":0.2,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-30998"},"relatedVulnerabilities":[{"id":"CVE-2026-30998","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-30998","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30998","date":"2026-11-09","epss":0.004,"percentile":0.34485}],"urls":["https://excellent-oatmeal-319.notion.site/CVE-2026-30998-Resource-Leak-3265a71f9cca4dc58df4632ce8b60a50","https://ffmpeg.org/doxygen/7.0/zmqsend_8c_source.html","https://github.com/FFmpeg/FFmpeg/blob/master/tools/zmqsend.c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-30998","description":"An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-30998","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-30998","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-30998","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30998","date":"2026-11-09","epss":0.004,"percentile":0.34485}],"risk":0.2,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-30998"},"relatedVulnerabilities":[{"id":"CVE-2026-30998","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-30998","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30998","date":"2026-11-09","epss":0.004,"percentile":0.34485}],"urls":["https://excellent-oatmeal-319.notion.site/CVE-2026-30998-Resource-Leak-3265a71f9cca4dc58df4632ce8b60a50","https://ffmpeg.org/doxygen/7.0/zmqsend_8c_source.html","https://github.com/FFmpeg/FFmpeg/blob/master/tools/zmqsend.c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-30998","description":"An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-09","epss":0.00396,"percentile":0.34087}],"risk":0.198,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-09","epss":0.00396,"percentile":0.34087}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-09","epss":0.00396,"percentile":0.34087}],"risk":0.198,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-09","epss":0.00396,"percentile":0.34087}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64833","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-11-09","epss":0.00396,"percentile":0.34052}],"risk":0.198,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64833"},"relatedVulnerabilities":[{"id":"CVE-2026-64833","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-11-09","epss":0.00396,"percentile":0.34052}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64833","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-11-09","epss":0.00396,"percentile":0.34052}],"risk":0.198,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64833"},"relatedVulnerabilities":[{"id":"CVE-2026-64833","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-11-09","epss":0.00396,"percentile":0.34052}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64833","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64833","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-11-09","epss":0.00396,"percentile":0.34052}],"risk":0.198,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64833"},"relatedVulnerabilities":[{"id":"CVE-2026-64833","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64833","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64833","date":"2026-11-09","epss":0.00396,"percentile":0.34052}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64833","description":"FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer."}]},{"artifact":{"id":"4c2c2b9acb3996f5","cpes":["cpe:2.3:a:cpp:cpp:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*"],"name":"cpp","purl":"pkg:deb/ubuntu/cpp@4%3A15.2.0-5ubuntu1?arch=amd64&distro=ubuntu-26.04&upstream=gcc-defaults%401.230ubuntu1","type":"deb","version":"4:15.2.0-5ubuntu1","language":"","licenses":["BSD-4-Clause","GPL-2.0-or-later"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/cpp-x86-64-linux-gnu/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/cpp/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp.list","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.list"},{"path":"/var/lib/dpkg/info/cpp.postinst","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.postinst"},{"path":"/var/lib/dpkg/info/cpp.postrm","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.postrm"},{"path":"/var/lib/dpkg/info/cpp.preinst","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.preinst"},{"path":"/var/lib/dpkg/info/cpp.prerm","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.prerm"}],"upstreams":[{"name":"gcc-defaults","version":"1.230ubuntu1"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gcc-defaults","version":"1.230ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-09","epss":0.00395,"percentile":0.33954}],"risk":0.1975,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-114691"},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-09","epss":0.00395,"percentile":0.33954}],"urls":["https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"493d4c4e9b5d7374","cpes":["cpe:2.3:a:cpp-x86-64-linux-gnu:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64-linux-gnu:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux_gnu:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux_gnu:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64-linux:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64-linux:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*"],"name":"cpp-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/cpp-x86-64-linux-gnu@4%3A15.2.0-5ubuntu1?arch=amd64&distro=ubuntu-26.04&upstream=gcc-defaults%401.230ubuntu1","type":"deb","version":"4:15.2.0-5ubuntu1","language":"","licenses":["BSD-4-Clause","GPL-2.0-or-later"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/cpp-x86-64-linux-gnu/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/cpp-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.list","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-defaults","version":"1.230ubuntu1"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gcc-defaults","version":"1.230ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-09","epss":0.00395,"percentile":0.33954}],"risk":0.1975,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-114691"},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-09","epss":0.00395,"percentile":0.33954}],"urls":["https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"e621b8e011c3dd21","cpes":["cpe:2.3:a:libcups2t64:libcups2t64:2.4.16-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"libcups2t64","purl":"pkg:deb/ubuntu/libcups2t64@2.4.16-1ubuntu1.3?arch=amd64&distro=ubuntu-26.04&upstream=cups","type":"deb","version":"2.4.16-1ubuntu1.3","language":"","licenses":["Apache-2.0","Apache-2.0-with-GPL2-LGPL2-Exception","BSD-2-Clause","FSFUL","Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcups2t64/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libcups2t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcups2t64:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libcups2t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cups"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87875","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"cups","version":"2.4.16-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87875","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87875","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-87875","date":"2026-11-09","epss":0.00392,"percentile":0.3362}],"risk":0.196,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87875"},"relatedVulnerabilities":[{"id":"CVE-2026-87875","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87875","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-87875","date":"2026-11-09","epss":0.00392,"percentile":0.3362}],"urls":["https://access.redhat.com/errata/RHSA-2026:66600","https://access.redhat.com/security/cve/CVE-2026-87875","https://bugzilla.redhat.com/show_bug.cgi?id=2530994","https://github.com/OpenPrinting/cups/commit/0c6842fc615e8afa284136a092da8178abf5f142","https://github.com/OpenPrinting/cups/commit/2b1dc178a2d2325135b855142e384f4e8c42d8e4","https://github.com/OpenPrinting/cups/security/advisories/GHSA-559w-7676-3xrq"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87875","description":"The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content."}]},{"artifact":{"id":"750d0316e4cb0212","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.7.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.7.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=expat","type":"deb","version":"2.7.4-1ubuntu0.2","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-118370","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"expat","version":"2.7.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-118370","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-118370","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-118370","date":"2026-11-09","epss":0.00391,"percentile":0.33515}],"risk":0.1955,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-118370"},"relatedVulnerabilities":[{"id":"CVE-2026-118370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118370","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-118370","date":"2026-11-09","epss":0.00391,"percentile":0.33515}],"urls":["https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140","https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae","https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c","https://github.com/libexpat/libexpat/pull/1450","https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118370","description":"libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply a multi-gigabyte document with a start tag carrying over 2^30 attributes to overflow attIndex and nPrefixes, crashing applications or corrupting heap memory."}]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15714","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15714","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15714","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15714","date":"2026-11-09","epss":0.0039,"percentile":0.33446}],"risk":0.19499999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15714"},"relatedVulnerabilities":[{"id":"CVE-2026-15714","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15714","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15714","date":"2026-11-09","epss":0.0039,"percentile":0.33446}],"urls":["https://access.redhat.com/security/cve/CVE-2026-15714","https://bugzilla.redhat.com/show_bug.cgi?id=2499942","https://gitlab.gnome.org/GNOME/libsoup/-/work_items/542"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15714","description":"An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15714","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15714","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15714","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15714","date":"2026-11-09","epss":0.0039,"percentile":0.33446}],"risk":0.19499999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15714"},"relatedVulnerabilities":[{"id":"CVE-2026-15714","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15714","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15714","date":"2026-11-09","epss":0.0039,"percentile":0.33446}],"urls":["https://access.redhat.com/security/cve/CVE-2026-15714","https://bugzilla.redhat.com/show_bug.cgi?id=2499942","https://gitlab.gnome.org/GNOME/libsoup/-/work_items/542"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15714","description":"An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers() function inside soup-multipart-input-stream.c, which does not adequately restrict or validate the size of incoming multipart boundary strings. When processing a crafted HTTP response containing a malformed or oversized boundary parameter, the internal stream reader reads past the allocated buffer bounds. A remote, unauthenticated attacker can exploit this behavior to cause a service denial (DoS) through application failure or potentially read fragments of unauthorized memory metadata."}]},{"artifact":{"id":"164b170cdee0b5fb","cpes":["cpe:2.3:a:libsndfile1:libsndfile1:1.2.2-4:*:*:*:*:*:*:*"],"name":"libsndfile1","purl":"pkg:deb/ubuntu/libsndfile1@1.2.2-4?arch=amd64&distro=ubuntu-26.04&upstream=libsndfile","type":"deb","version":"1.2.2-4","language":"","licenses":["Apache-2.0","BSD-2-clause","BSD-3-clause","FSFAP","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","NTP","gsm","sun"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsndfile1/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/libsndfile1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsndfile1:amd64.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/libsndfile1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsndfile"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-88372","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsndfile","version":"1.2.2-4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-88372","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-88372","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-88372","date":"2026-11-09","epss":0.0039,"percentile":0.33416}],"risk":0.19499999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-88372"},"relatedVulnerabilities":[{"id":"CVE-2026-88372","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-88372","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-88372","date":"2026-11-09","epss":0.0039,"percentile":0.33416}],"urls":["https://github.com/libsndfile/libsndfile/issues/1151"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-88372","description":"libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-47058","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-47058","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-47058","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-47058","date":"2026-11-09","epss":0.00387,"percentile":0.33113}],"risk":0.1935,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-47058"},"relatedVulnerabilities":[{"id":"CVE-2026-47058","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-47058","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-47058","date":"2026-11-09","epss":0.00387,"percentile":0.33113}],"urls":["https://www.oracle.com/security-alerts/cpujul2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-07-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-47058","description":"Vulnerability in Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and  11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-47058","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-47058","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-47058","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-47058","date":"2026-11-09","epss":0.00387,"percentile":0.33113}],"risk":0.1935,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-47058"},"relatedVulnerabilities":[{"id":"CVE-2026-47058","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-47058","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-47058","date":"2026-11-09","epss":0.00387,"percentile":0.33113}],"urls":["https://www.oracle.com/security-alerts/cpujul2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-07-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-47058","description":"Vulnerability in Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and  11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0716","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-0716","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-0716","cwe":"CWE-805","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-0716","date":"2026-11-09","epss":0.00382,"percentile":0.32496}],"risk":0.191,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0716"},"relatedVulnerabilities":[{"id":"CVE-2026-0716","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0716","cwe":"CWE-805","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-0716","date":"2026-11-09","epss":0.00382,"percentile":0.32496}],"urls":["https://access.redhat.com/security/cve/CVE-2026-0716","https://bugzilla.redhat.com/show_bug.cgi?id=2427896","https://gitlab.gnome.org/GNOME/libsoup/-/issues/476"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0716","description":"A flaw was found in libsoup’s WebSocket frame processing when handling incoming messages. If a non-default configuration is used where the maximum incoming payload size is unset, the library may read memory outside the intended bounds. This can cause unintended memory exposure or a crash. Applications using libsoup’s WebSocket support with this configuration may be impacted."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0716","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-0716","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-0716","cwe":"CWE-805","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-0716","date":"2026-11-09","epss":0.00382,"percentile":0.32496}],"risk":0.191,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0716"},"relatedVulnerabilities":[{"id":"CVE-2026-0716","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0716","cwe":"CWE-805","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-0716","date":"2026-11-09","epss":0.00382,"percentile":0.32496}],"urls":["https://access.redhat.com/security/cve/CVE-2026-0716","https://bugzilla.redhat.com/show_bug.cgi?id=2427896","https://gitlab.gnome.org/GNOME/libsoup/-/issues/476"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0716","description":"A flaw was found in libsoup’s WebSocket frame processing when handling incoming messages. If a non-default configuration is used where the maximum incoming payload size is unset, the library may read memory outside the intended bounds. This can cause unintended memory exposure or a crash. Applications using libsoup’s WebSocket support with this configuration may be impacted."}]},{"artifact":{"id":"825e401acfd213c2","cpes":["cpe:2.3:a:xserver-common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver-common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xserver-common","purl":"pkg:deb/ubuntu/xserver-common@2%3A21.1.22-1ubuntu1.3?arch=all&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xserver-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xserver-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-33999","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-33999","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-33999","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33999","cwe":"CWE-191","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33999","date":"2026-11-09","epss":0.0038,"percentile":0.3229}],"risk":0.19,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-33999"},"relatedVulnerabilities":[{"id":"CVE-2026-33999","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33999","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33999","cwe":"CWE-191","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33999","date":"2026-11-09","epss":0.0038,"percentile":0.3229}],"urls":["https://access.redhat.com/errata/RHSA-2026:10739","https://access.redhat.com/errata/RHSA-2026:11352","https://access.redhat.com/errata/RHSA-2026:11369","https://access.redhat.com/errata/RHSA-2026:11388","https://access.redhat.com/errata/RHSA-2026:11656","https://access.redhat.com/errata/RHSA-2026:11692","https://access.redhat.com/errata/RHSA-2026:13414","https://access.redhat.com/errata/RHSA-2026:19125","https://access.redhat.com/errata/RHSA-2026:19342","https://access.redhat.com/errata/RHSA-2026:19343","https://access.redhat.com/errata/RHSA-2026:19344","https://access.redhat.com/errata/RHSA-2026:20547","https://access.redhat.com/errata/RHSA-2026:20555","https://access.redhat.com/errata/RHSA-2026:20557","https://access.redhat.com/errata/RHSA-2026:20558","https://access.redhat.com/errata/RHSA-2026:20560","https://access.redhat.com/errata/RHSA-2026:20561","https://access.redhat.com/errata/RHSA-2026:20562","https://access.redhat.com/errata/RHSA-2026:20563","https://access.redhat.com/errata/RHSA-2026:20575","https://access.redhat.com/errata/RHSA-2026:20576","https://access.redhat.com/errata/RHSA-2026:20590","https://access.redhat.com/errata/RHSA-2026:21699","https://access.redhat.com/errata/RHSA-2026:21712","https://access.redhat.com/errata/RHSA-2026:21715","https://access.redhat.com/errata/RHSA-2026:21716","https://access.redhat.com/errata/RHSA-2026:21718","https://access.redhat.com/errata/RHSA-2026:21741","https://access.redhat.com/errata/RHSA-2026:21742","https://access.redhat.com/errata/RHSA-2026:22424","https://access.redhat.com/errata/RHSA-2026:22456","https://access.redhat.com/errata/RHSA-2026:23254","https://access.redhat.com/errata/RHSA-2026:23255","https://access.redhat.com/errata/RHSA-2026:23496","https://access.redhat.com/errata/RHSA-2026:24341","https://access.redhat.com/security/cve/CVE-2026-33999","https://bugzilla.redhat.com/show_bug.cgi?id=2451106","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33999.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33999","description":"A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts."}]},{"artifact":{"id":"e55ab909ded790e2","cpes":["cpe:2.3:a:xvfb:xvfb:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xvfb","purl":"pkg:deb/ubuntu/xvfb@2%3A21.1.22-1ubuntu1.3?arch=amd64&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xvfb/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xvfb/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-33999","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-33999","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-33999","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33999","cwe":"CWE-191","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33999","date":"2026-11-09","epss":0.0038,"percentile":0.3229}],"risk":0.19,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-33999"},"relatedVulnerabilities":[{"id":"CVE-2026-33999","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33999","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33999","cwe":"CWE-191","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33999","date":"2026-11-09","epss":0.0038,"percentile":0.3229}],"urls":["https://access.redhat.com/errata/RHSA-2026:10739","https://access.redhat.com/errata/RHSA-2026:11352","https://access.redhat.com/errata/RHSA-2026:11369","https://access.redhat.com/errata/RHSA-2026:11388","https://access.redhat.com/errata/RHSA-2026:11656","https://access.redhat.com/errata/RHSA-2026:11692","https://access.redhat.com/errata/RHSA-2026:13414","https://access.redhat.com/errata/RHSA-2026:19125","https://access.redhat.com/errata/RHSA-2026:19342","https://access.redhat.com/errata/RHSA-2026:19343","https://access.redhat.com/errata/RHSA-2026:19344","https://access.redhat.com/errata/RHSA-2026:20547","https://access.redhat.com/errata/RHSA-2026:20555","https://access.redhat.com/errata/RHSA-2026:20557","https://access.redhat.com/errata/RHSA-2026:20558","https://access.redhat.com/errata/RHSA-2026:20560","https://access.redhat.com/errata/RHSA-2026:20561","https://access.redhat.com/errata/RHSA-2026:20562","https://access.redhat.com/errata/RHSA-2026:20563","https://access.redhat.com/errata/RHSA-2026:20575","https://access.redhat.com/errata/RHSA-2026:20576","https://access.redhat.com/errata/RHSA-2026:20590","https://access.redhat.com/errata/RHSA-2026:21699","https://access.redhat.com/errata/RHSA-2026:21712","https://access.redhat.com/errata/RHSA-2026:21715","https://access.redhat.com/errata/RHSA-2026:21716","https://access.redhat.com/errata/RHSA-2026:21718","https://access.redhat.com/errata/RHSA-2026:21741","https://access.redhat.com/errata/RHSA-2026:21742","https://access.redhat.com/errata/RHSA-2026:22424","https://access.redhat.com/errata/RHSA-2026:22456","https://access.redhat.com/errata/RHSA-2026:23254","https://access.redhat.com/errata/RHSA-2026:23255","https://access.redhat.com/errata/RHSA-2026:23496","https://access.redhat.com/errata/RHSA-2026:24341","https://access.redhat.com/security/cve/CVE-2026-33999","https://bugzilla.redhat.com/show_bug.cgi?id=2451106","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33999.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33999","description":"A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91382","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91382","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91382","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91382","date":"2026-11-09","epss":0.00377,"percentile":0.31935}],"risk":0.1885,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91382"},"relatedVulnerabilities":[{"id":"CVE-2026-91382","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91382","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91382","date":"2026-11-09","epss":0.00377,"percentile":0.31935}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91382","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91382","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91382","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91382","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91382","date":"2026-11-09","epss":0.00377,"percentile":0.31935}],"risk":0.1885,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91382"},"relatedVulnerabilities":[{"id":"CVE-2026-91382","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91382","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91382","date":"2026-11-09","epss":0.00377,"percentile":0.31935}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91382","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L)."}]},{"artifact":{"id":"7fffb90f23a3ed12","cpes":["cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2-2:libsasl2_2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2_2:libsasl2-2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2_2:libsasl2_2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2:libsasl2-2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2:libsasl2_2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*"],"name":"libsasl2-2","purl":"pkg:deb/ubuntu/libsasl2-2@2.1.28%2Bdfsg1-9ubuntu3?arch=amd64&distro=ubuntu-26.04&upstream=cyrus-sasl2","type":"deb","version":"2.1.28+dfsg1-9ubuntu3","language":"","licenses":["BSD-2-clause","BSD-2.2-clause","BSD-3-Clause-Attribution","BSD-3-clause","BSD-3-clause-JANET","BSD-3-clause-PADL","BSD-4-clause-UC","FSFULLR","GPL-3","GPL-3+","IBM-as-is","MIT-CMU","MIT-Export","MIT-OpenVision","OpenLDAP","RSA-MD"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsasl2-2/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libsasl2-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsasl2-2:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libsasl2-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cyrus-sasl2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107161","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"cyrus-sasl2","version":"2.1.28+dfsg1-9ubuntu3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107161","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107161","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-107161","date":"2026-11-09","epss":0.00376,"percentile":0.31828}],"risk":0.188,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107161"},"relatedVulnerabilities":[{"id":"CVE-2026-107161","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107161","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-107161","date":"2026-11-09","epss":0.00376,"percentile":0.31828}],"urls":["https://access.redhat.com/security/cve/CVE-2026-107161","https://bugzilla.redhat.com/show_bug.cgi?id=2460420","http://www.openwall.com/lists/oss-security/2026/10/09/20","https://lists.debian.org/debian-lts-announce/2026/10/msg00064.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107161","description":"A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-of-bounds write whose size depends on attacker-controlled input. A malicious or on-path DIGEST-MD5 (or HTTP Digest) server can trigger this flaw in a connecting client by supplying a crafted challenge field, such as realm or nonce, most likely resulting in a crash of the client application."}]},{"artifact":{"id":"4bb918f520265ccf","cpes":["cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2-modules-db:libsasl2_modules_db:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2_modules_db:libsasl2-modules-db:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2_modules_db:libsasl2_modules_db:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2-modules:libsasl2-modules-db:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2-modules:libsasl2_modules_db:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2_modules:libsasl2-modules-db:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2_modules:libsasl2_modules_db:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2:libsasl2-modules-db:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:libsasl2:libsasl2_modules_db:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*"],"name":"libsasl2-modules-db","purl":"pkg:deb/ubuntu/libsasl2-modules-db@2.1.28%2Bdfsg1-9ubuntu3?arch=amd64&distro=ubuntu-26.04&upstream=cyrus-sasl2","type":"deb","version":"2.1.28+dfsg1-9ubuntu3","language":"","licenses":["BSD-2-clause","BSD-2.2-clause","BSD-3-Clause-Attribution","BSD-3-clause","BSD-3-clause-JANET","BSD-3-clause-PADL","BSD-4-clause-UC","FSFULLR","GPL-3","GPL-3+","IBM-as-is","MIT-CMU","MIT-Export","MIT-OpenVision","OpenLDAP","RSA-MD"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsasl2-modules-db/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libsasl2-modules-db/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsasl2-modules-db:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libsasl2-modules-db:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cyrus-sasl2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107161","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"cyrus-sasl2","version":"2.1.28+dfsg1-9ubuntu3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107161","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107161","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-107161","date":"2026-11-09","epss":0.00376,"percentile":0.31828}],"risk":0.188,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107161"},"relatedVulnerabilities":[{"id":"CVE-2026-107161","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107161","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-107161","date":"2026-11-09","epss":0.00376,"percentile":0.31828}],"urls":["https://access.redhat.com/security/cve/CVE-2026-107161","https://bugzilla.redhat.com/show_bug.cgi?id=2460420","http://www.openwall.com/lists/oss-security/2026/10/09/20","https://lists.debian.org/debian-lts-announce/2026/10/msg00064.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107161","description":"A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-of-bounds write whose size depends on attacker-controlled input. A malicious or on-path DIGEST-MD5 (or HTTP Digest) server can trigger this flaw in a connecting client by supplying a crafted challenge field, such as realm or nonce, most likely resulting in a crash of the client application."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-22921","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-22921","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-22921","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-22921","date":"2026-11-09","epss":0.00372,"percentile":0.31383}],"risk":0.186,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-22921"},"relatedVulnerabilities":[{"id":"CVE-2025-22921","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-22921","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-22921","date":"2026-11-09","epss":0.00372,"percentile":0.31383}],"urls":["https://trac.ffmpeg.org/ticket/11393","https://lists.debian.org/debian-lts-announce/2025/02/msg00037.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-22921","description":"FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-22921","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-22921","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-22921","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-22921","date":"2026-11-09","epss":0.00372,"percentile":0.31383}],"risk":0.186,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-22921"},"relatedVulnerabilities":[{"id":"CVE-2025-22921","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-22921","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-22921","date":"2026-11-09","epss":0.00372,"percentile":0.31383}],"urls":["https://trac.ffmpeg.org/ticket/11393","https://lists.debian.org/debian-lts-announce/2025/02/msg00037.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-22921","description":"FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-22921","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-22921","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-22921","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-22921","date":"2026-11-09","epss":0.00372,"percentile":0.31383}],"risk":0.186,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-22921"},"relatedVulnerabilities":[{"id":"CVE-2025-22921","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-22921","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-22921","date":"2026-11-09","epss":0.00372,"percentile":0.31383}],"urls":["https://trac.ffmpeg.org/ticket/11393","https://lists.debian.org/debian-lts-announce/2025/02/msg00037.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-22921","description":"FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c."}]},{"artifact":{"id":"750d0316e4cb0212","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.7.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.7.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=expat","type":"deb","version":"2.7.4-1ubuntu0.2","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102633","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"expat","version":"2.7.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-102633","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-102633","cwe":"CWE-190","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-102633","date":"2026-11-09","epss":0.00368,"percentile":0.30871}],"risk":0.184,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-102633"},"relatedVulnerabilities":[{"id":"CVE-2026-102633","cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102633","cwe":"CWE-190","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-102633","date":"2026-11-09","epss":0.00368,"percentile":0.30871}],"urls":["https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/lib/xmlparse.c#L1003","https://github.com/libexpat/libexpat/commit/209801d7fbaf07ab74bae8cb32dd2ab9e5846118","https://github.com/libexpat/libexpat/pull/1392","https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.8.5-integer-overflow-in-expat-realloc"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102633","description":"libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to applications parsing with vulnerable libexpat can cause heap buffer overflow, memory corruption, or denial of service."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-6605","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2023-6605","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-6605","cwe":"CWE-99","type":"Secondary","source":"patrick@puiterwijk.org"}],"epss":[{"cve":"CVE-2023-6605","date":"2026-11-09","epss":0.00368,"percentile":0.30866}],"risk":0.184,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-6605"},"relatedVulnerabilities":[{"id":"CVE-2023-6605","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":7.2,"impactScore":2.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"patrick@puiterwijk.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":7.2,"impactScore":2.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6605","cwe":"CWE-99","type":"Secondary","source":"patrick@puiterwijk.org"}],"epss":[{"cve":"CVE-2023-6605","date":"2026-11-09","epss":0.00368,"percentile":0.30866}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2334336","https://lists.debian.org/debian-lts-announce/2025/07/msg00004.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6605","description":"A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-6605","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2023-6605","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-6605","cwe":"CWE-99","type":"Secondary","source":"patrick@puiterwijk.org"}],"epss":[{"cve":"CVE-2023-6605","date":"2026-11-09","epss":0.00368,"percentile":0.30866}],"risk":0.184,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-6605"},"relatedVulnerabilities":[{"id":"CVE-2023-6605","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":7.2,"impactScore":2.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"patrick@puiterwijk.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":7.2,"impactScore":2.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6605","cwe":"CWE-99","type":"Secondary","source":"patrick@puiterwijk.org"}],"epss":[{"cve":"CVE-2023-6605","date":"2026-11-09","epss":0.00368,"percentile":0.30866}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2334336","https://lists.debian.org/debian-lts-announce/2025/07/msg00004.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6605","description":"A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-6605","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2023-6605","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-6605","cwe":"CWE-99","type":"Secondary","source":"patrick@puiterwijk.org"}],"epss":[{"cve":"CVE-2023-6605","date":"2026-11-09","epss":0.00368,"percentile":0.30866}],"risk":0.184,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-6605"},"relatedVulnerabilities":[{"id":"CVE-2023-6605","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":7.2,"impactScore":2.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"patrick@puiterwijk.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":7.2,"impactScore":2.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6605","cwe":"CWE-99","type":"Secondary","source":"patrick@puiterwijk.org"}],"epss":[{"cve":"CVE-2023-6605","date":"2026-11-09","epss":0.00368,"percentile":0.30866}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2334336","https://lists.debian.org/debian-lts-announce/2025/07/msg00004.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6605","description":"A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs."}]},{"artifact":{"id":"7531e6f043f69f30","cpes":["cpe:2.3:a:libheif-plugin-aomdec:libheif-plugin-aomdec:1.21.2-3ubuntu0.6:*:*:*:*:*:*:*","cpe:2.3:a:libheif-plugin-aomdec:libheif_plugin_aomdec:1.21.2-3ubuntu0.6:*:*:*:*:*:*:*","cpe:2.3:a:libheif_plugin_aomdec:libheif-plugin-aomdec:1.21.2-3ubuntu0.6:*:*:*:*:*:*:*","cpe:2.3:a:libheif_plugin_aomdec:libheif_plugin_aomdec:1.21.2-3ubuntu0.6:*:*:*:*:*:*:*","cpe:2.3:a:libheif-plugin:libheif-plugin-aomdec:1.21.2-3ubuntu0.6:*:*:*:*:*:*:*","cpe:2.3:a:libheif-plugin:libheif_plugin_aomdec:1.21.2-3ubuntu0.6:*:*:*:*:*:*:*","cpe:2.3:a:libheif_plugin:libheif-plugin-aomdec:1.21.2-3ubuntu0.6:*:*:*:*:*:*:*","cpe:2.3:a:libheif_plugin:libheif_plugin_aomdec:1.21.2-3ubuntu0.6:*:*:*:*:*:*:*","cpe:2.3:a:libheif:libheif-plugin-aomdec:1.21.2-3ubuntu0.6:*:*:*:*:*:*:*","cpe:2.3:a:libheif:libheif_plugin_aomdec:1.21.2-3ubuntu0.6:*:*:*:*:*:*:*"],"name":"libheif-plugin-aomdec","purl":"pkg:deb/ubuntu/libheif-plugin-aomdec@1.21.2-3ubuntu0.6?arch=amd64&distro=ubuntu-26.04&upstream=libheif","type":"deb","version":"1.21.2-3ubuntu0.6","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-Clause-UC","BSL-1.0","Expat","GPL-3","GPL-3+","LGPL-3","LGPL-3+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libheif-plugin-aomdec/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libheif-plugin-aomdec/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libheif-plugin-aomdec:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libheif-plugin-aomdec:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libheif"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120208","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libheif","version":"1.21.2-3ubuntu0.6"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-120208","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-120208","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120208","date":"2026-11-09","epss":0.00365,"percentile":0.30562}],"risk":0.1825,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-120208"},"relatedVulnerabilities":[{"id":"CVE-2026-120208","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120208","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120208","date":"2026-11-09","epss":0.00365,"percentile":0.30562}],"urls":["https://github.com/strukturag/libheif/blob/v1.23.2/libheif/codecs/uncompressed/unc_decoder_mixed_interleave.cc#L95","https://github.com/strukturag/libheif/commit/9d3cd91d7b1c8c68deef6d06057ab956bcb0dfb9","https://github.com/strukturag/libheif/releases/tag/v1.23.3","https://github.com/strukturag/libheif/security/advisories/GHSA-x8r2-mggj-j6wr","https://www.vulncheck.com/advisories/libheif-1.18.0-before-1.23.3-heap-buffer-overflow-via-unci-mixed-interleave-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120208","description":"libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::processTile() that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craft a HEIF file declaring, for example, 16-bit Cb and 8-bit Cr to trigger file-controlled heap writes past the Cr plane, potentially achieving code execution in image-processing pipelines."}]},{"artifact":{"id":"492e5500178cd98d","cpes":["cpe:2.3:a:libheif1:libheif1:1.21.2-3ubuntu0.6:*:*:*:*:*:*:*"],"name":"libheif1","purl":"pkg:deb/ubuntu/libheif1@1.21.2-3ubuntu0.6?arch=amd64&distro=ubuntu-26.04&upstream=libheif","type":"deb","version":"1.21.2-3ubuntu0.6","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-Clause-UC","BSL-1.0","Expat","GPL-3","GPL-3+","LGPL-3","LGPL-3+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libheif1/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libheif1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libheif1:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libheif1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libheif"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120208","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libheif","version":"1.21.2-3ubuntu0.6"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-120208","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-120208","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120208","date":"2026-11-09","epss":0.00365,"percentile":0.30562}],"risk":0.1825,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-120208"},"relatedVulnerabilities":[{"id":"CVE-2026-120208","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120208","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120208","date":"2026-11-09","epss":0.00365,"percentile":0.30562}],"urls":["https://github.com/strukturag/libheif/blob/v1.23.2/libheif/codecs/uncompressed/unc_decoder_mixed_interleave.cc#L95","https://github.com/strukturag/libheif/commit/9d3cd91d7b1c8c68deef6d06057ab956bcb0dfb9","https://github.com/strukturag/libheif/releases/tag/v1.23.3","https://github.com/strukturag/libheif/security/advisories/GHSA-x8r2-mggj-j6wr","https://www.vulncheck.com/advisories/libheif-1.18.0-before-1.23.3-heap-buffer-overflow-via-unci-mixed-interleave-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120208","description":"libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interleave::processTile() that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craft a HEIF file declaring, for example, 16-bit Cb and 8-bit Cr to trigger file-controlled heap writes past the Cr plane, potentially achieving code execution in image-processing pipelines."}]},{"artifact":{"id":"825e401acfd213c2","cpes":["cpe:2.3:a:xserver-common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver-common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xserver-common","purl":"pkg:deb/ubuntu/xserver-common@2%3A21.1.22-1ubuntu1.3?arch=all&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xserver-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xserver-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5574","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2023-5574","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-5574","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5574","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5574","date":"2026-11-09","epss":0.00608,"percentile":0.49366}],"risk":0.1824,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5574"},"relatedVulnerabilities":[{"id":"CVE-2023-5574","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5574","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5574","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5574","date":"2026-11-09","epss":0.00608,"percentile":0.49366}],"urls":["https://access.redhat.com/errata/RHSA-2024:2298","https://access.redhat.com/security/cve/CVE-2023-5574","https://bugzilla.redhat.com/show_bug.cgi?id=2244735","https://lists.x.org/archives/xorg-announce/2023-October/003430.html","https://security.netapp.com/advisory/ntap-20231130-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5574","description":"A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service."}]},{"artifact":{"id":"e55ab909ded790e2","cpes":["cpe:2.3:a:xvfb:xvfb:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xvfb","purl":"pkg:deb/ubuntu/xvfb@2%3A21.1.22-1ubuntu1.3?arch=amd64&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xvfb/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xvfb/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5574","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2023-5574","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-5574","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5574","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5574","date":"2026-11-09","epss":0.00608,"percentile":0.49366}],"risk":0.1824,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5574"},"relatedVulnerabilities":[{"id":"CVE-2023-5574","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5574","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5574","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5574","date":"2026-11-09","epss":0.00608,"percentile":0.49366}],"urls":["https://access.redhat.com/errata/RHSA-2024:2298","https://access.redhat.com/security/cve/CVE-2023-5574","https://bugzilla.redhat.com/show_bug.cgi?id=2244735","https://lists.x.org/archives/xorg-announce/2023-October/003430.html","https://security.netapp.com/advisory/ntap-20231130-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5574","description":"A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18393","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-18393","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-18393","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18393","date":"2026-11-09","epss":0.00361,"percentile":0.30094}],"risk":0.1805,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-18393"},"relatedVulnerabilities":[{"id":"CVE-2026-18393","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.4,"impactScore":4.3,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18393","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18393","date":"2026-11-09","epss":0.00361,"percentile":0.30094}],"urls":["https://access.redhat.com/security/cve/CVE-2026-18393","https://bugzilla.redhat.com/show_bug.cgi?id=2520309","https://github.com/FFmpeg/FFmpeg/commit/242ff799c75f20bade946314c8d741d0887ee11c","https://patchwork.ffmpeg.org/project/ffmpeg/patch/177767065817.63.1948165304485903849@29965ddac10e/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18393","description":"A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond\nthe bounds of a heap-allocated buffer when processing crafted TDSC cursor\ndata. A remote attacker could exploit this by supplying a specially crafted\nvideo file, potentially leading to a denial of service or arbitrary code\nexecution."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18393","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-18393","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-18393","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18393","date":"2026-11-09","epss":0.00361,"percentile":0.30094}],"risk":0.1805,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-18393"},"relatedVulnerabilities":[{"id":"CVE-2026-18393","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.4,"impactScore":4.3,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18393","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18393","date":"2026-11-09","epss":0.00361,"percentile":0.30094}],"urls":["https://access.redhat.com/security/cve/CVE-2026-18393","https://bugzilla.redhat.com/show_bug.cgi?id=2520309","https://github.com/FFmpeg/FFmpeg/commit/242ff799c75f20bade946314c8d741d0887ee11c","https://patchwork.ffmpeg.org/project/ffmpeg/patch/177767065817.63.1948165304485903849@29965ddac10e/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18393","description":"A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond\nthe bounds of a heap-allocated buffer when processing crafted TDSC cursor\ndata. A remote attacker could exploit this by supplying a specially crafted\nvideo file, potentially leading to a denial of service or arbitrary code\nexecution."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18393","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-18393","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-18393","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18393","date":"2026-11-09","epss":0.00361,"percentile":0.30094}],"risk":0.1805,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-18393"},"relatedVulnerabilities":[{"id":"CVE-2026-18393","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.4,"impactScore":4.3,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18393","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18393","date":"2026-11-09","epss":0.00361,"percentile":0.30094}],"urls":["https://access.redhat.com/security/cve/CVE-2026-18393","https://bugzilla.redhat.com/show_bug.cgi?id=2520309","https://github.com/FFmpeg/FFmpeg/commit/242ff799c75f20bade946314c8d741d0887ee11c","https://patchwork.ffmpeg.org/project/ffmpeg/patch/177767065817.63.1948165304485903849@29965ddac10e/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18393","description":"A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond\nthe bounds of a heap-allocated buffer when processing crafted TDSC cursor\ndata. A remote attacker could exploit this by supplying a specially crafted\nvideo file, potentially leading to a denial of service or arbitrary code\nexecution."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-103995","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-103995","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-103995","cwe":"CWE-444","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-103995","date":"2026-11-09","epss":0.0036,"percentile":0.29991}],"risk":0.18,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-103995"},"relatedVulnerabilities":[{"id":"CVE-2026-103995","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103995","cwe":"CWE-444","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-103995","date":"2026-11-09","epss":0.0036,"percentile":0.29991}],"urls":["https://github.com/python/cpython/commit/2eb2af805c156ca52b316bb4ced5e0ab3971d0ae","https://github.com/python/cpython/commit/9f52b443c002cccfb54bda0706a9276b6b4a109d","https://github.com/python/cpython/issues/150751","https://github.com/python/cpython/pull/150752"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103995","description":"Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-103995","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-103995","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-103995","cwe":"CWE-444","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-103995","date":"2026-11-09","epss":0.0036,"percentile":0.29991}],"risk":0.18,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-103995"},"relatedVulnerabilities":[{"id":"CVE-2026-103995","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103995","cwe":"CWE-444","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-103995","date":"2026-11-09","epss":0.0036,"percentile":0.29991}],"urls":["https://github.com/python/cpython/commit/2eb2af805c156ca52b316bb4ced5e0ab3971d0ae","https://github.com/python/cpython/commit/9f52b443c002cccfb54bda0706a9276b6b4a109d","https://github.com/python/cpython/issues/150751","https://github.com/python/cpython/pull/150752"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103995","description":"Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-103995","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-103995","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-103995","cwe":"CWE-444","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-103995","date":"2026-11-09","epss":0.0036,"percentile":0.29991}],"risk":0.18,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-103995"},"relatedVulnerabilities":[{"id":"CVE-2026-103995","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103995","cwe":"CWE-444","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-103995","date":"2026-11-09","epss":0.0036,"percentile":0.29991}],"urls":["https://github.com/python/cpython/commit/2eb2af805c156ca52b316bb4ced5e0ab3971d0ae","https://github.com/python/cpython/commit/9f52b443c002cccfb54bda0706a9276b6b4a109d","https://github.com/python/cpython/issues/150751","https://github.com/python/cpython/pull/150752"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103995","description":"Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-103995","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-103995","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-103995","cwe":"CWE-444","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-103995","date":"2026-11-09","epss":0.0036,"percentile":0.29991}],"risk":0.18,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-103995"},"relatedVulnerabilities":[{"id":"CVE-2026-103995","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103995","cwe":"CWE-444","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-103995","date":"2026-11-09","epss":0.0036,"percentile":0.29991}],"urls":["https://github.com/python/cpython/commit/2eb2af805c156ca52b316bb4ced5e0ab3971d0ae","https://github.com/python/cpython/commit/9f52b443c002cccfb54bda0706a9276b6b4a109d","https://github.com/python/cpython/issues/150751","https://github.com/python/cpython/pull/150752"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103995","description":"Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-103995","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-103995","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-103995","cwe":"CWE-444","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-103995","date":"2026-11-09","epss":0.0036,"percentile":0.29991}],"risk":0.18,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-103995"},"relatedVulnerabilities":[{"id":"CVE-2026-103995","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103995","cwe":"CWE-444","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-103995","date":"2026-11-09","epss":0.0036,"percentile":0.29991}],"urls":["https://github.com/python/cpython/commit/2eb2af805c156ca52b316bb4ced5e0ab3971d0ae","https://github.com/python/cpython/commit/9f52b443c002cccfb54bda0706a9276b6b4a109d","https://github.com/python/cpython/issues/150751","https://github.com/python/cpython/pull/150752"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103995","description":"Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107696","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-09","epss":0.00359,"percentile":0.29917}],"risk":0.1795,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107696"},"relatedVulnerabilities":[{"id":"CVE-2026-107696","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-09","epss":0.00359,"percentile":0.29917}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107696","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-09","epss":0.00359,"percentile":0.29917}],"risk":0.1795,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107696"},"relatedVulnerabilities":[{"id":"CVE-2026-107696","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-09","epss":0.00359,"percentile":0.29917}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107696","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107696","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-09","epss":0.00359,"percentile":0.29917}],"risk":0.1795,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107696"},"relatedVulnerabilities":[{"id":"CVE-2026-107696","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107696","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107696","date":"2026-11-09","epss":0.00359,"percentile":0.29917}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902","https://gist.github.com/OxBat/648a0bd60c898f2ffb418e131ce26013","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/rtsp.c#L2225","https://www.vulncheck.com/advisories/ffmpeg-through-9.0.2-infinite-loop-via-rtsp-redirect-handling-in-rtsp-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107696","description":"FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or another server, causing endless reconnects that saturate a CPU core."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6879","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-6879","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6879","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-6879","date":"2026-11-09","epss":0.00355,"percentile":0.29482}],"risk":0.17750000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6879"},"relatedVulnerabilities":[{"id":"CVE-2026-6879","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6879","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-6879","date":"2026-11-09","epss":0.00355,"percentile":0.29482}],"urls":["https://github.com/python/cpython/commit/02c08e6b747ac43d0d866a4ffa916bedf3423f81","https://github.com/python/cpython/commit/037965c00a427cba5c05447efadc67c51a492e85","https://github.com/python/cpython/commit/0583f24ae678993e3f7939f51ad5bcae5ad9dc70","https://github.com/python/cpython/commit/2ffab083782968a4d732738f4f1dff6bbd69d2b0","https://github.com/python/cpython/commit/390337b8ba1658833fdef379e1739c9f9533a8db","https://github.com/python/cpython/commit/96510a3758f4a075f43223afdee3b6ee1a7a7f02","https://github.com/python/cpython/commit/cb409342a19f25656f62e679f8bac265fe1442c3","https://github.com/python/cpython/issues/152674","https://github.com/python/cpython/pull/152676","https://mail.python.org/archives/list/security-announce@python.org/thread/7YMZ6DDZVR26TJJBVO3RDNBAVGHNYAKR/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6879","description":"`Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, `[last()-N]`) on XML documents with many same-tag siblings. `Element.find()` is only affected when the first match is near the end  of the sibling list, such as with `[last()]` or `[last()-N]`;  `.//item[1]` short-circuits after the first match."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6879","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-6879","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6879","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-6879","date":"2026-11-09","epss":0.00355,"percentile":0.29482}],"risk":0.17750000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6879"},"relatedVulnerabilities":[{"id":"CVE-2026-6879","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6879","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-6879","date":"2026-11-09","epss":0.00355,"percentile":0.29482}],"urls":["https://github.com/python/cpython/commit/02c08e6b747ac43d0d866a4ffa916bedf3423f81","https://github.com/python/cpython/commit/037965c00a427cba5c05447efadc67c51a492e85","https://github.com/python/cpython/commit/0583f24ae678993e3f7939f51ad5bcae5ad9dc70","https://github.com/python/cpython/commit/2ffab083782968a4d732738f4f1dff6bbd69d2b0","https://github.com/python/cpython/commit/390337b8ba1658833fdef379e1739c9f9533a8db","https://github.com/python/cpython/commit/96510a3758f4a075f43223afdee3b6ee1a7a7f02","https://github.com/python/cpython/commit/cb409342a19f25656f62e679f8bac265fe1442c3","https://github.com/python/cpython/issues/152674","https://github.com/python/cpython/pull/152676","https://mail.python.org/archives/list/security-announce@python.org/thread/7YMZ6DDZVR26TJJBVO3RDNBAVGHNYAKR/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6879","description":"`Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, `[last()-N]`) on XML documents with many same-tag siblings. `Element.find()` is only affected when the first match is near the end  of the sibling list, such as with `[last()]` or `[last()-N]`;  `.//item[1]` short-circuits after the first match."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-6879","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-6879","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6879","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-6879","date":"2026-11-09","epss":0.00355,"percentile":0.29482}],"risk":0.17750000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6879"},"relatedVulnerabilities":[{"id":"CVE-2026-6879","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6879","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-6879","date":"2026-11-09","epss":0.00355,"percentile":0.29482}],"urls":["https://github.com/python/cpython/commit/02c08e6b747ac43d0d866a4ffa916bedf3423f81","https://github.com/python/cpython/commit/037965c00a427cba5c05447efadc67c51a492e85","https://github.com/python/cpython/commit/0583f24ae678993e3f7939f51ad5bcae5ad9dc70","https://github.com/python/cpython/commit/2ffab083782968a4d732738f4f1dff6bbd69d2b0","https://github.com/python/cpython/commit/390337b8ba1658833fdef379e1739c9f9533a8db","https://github.com/python/cpython/commit/96510a3758f4a075f43223afdee3b6ee1a7a7f02","https://github.com/python/cpython/commit/cb409342a19f25656f62e679f8bac265fe1442c3","https://github.com/python/cpython/issues/152674","https://github.com/python/cpython/pull/152676","https://mail.python.org/archives/list/security-announce@python.org/thread/7YMZ6DDZVR26TJJBVO3RDNBAVGHNYAKR/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6879","description":"`Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, `[last()-N]`) on XML documents with many same-tag siblings. `Element.find()` is only affected when the first match is near the end  of the sibling list, such as with `[last()]` or `[last()-N]`;  `.//item[1]` short-circuits after the first match."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6879","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-6879","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6879","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-6879","date":"2026-11-09","epss":0.00355,"percentile":0.29482}],"risk":0.17750000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6879"},"relatedVulnerabilities":[{"id":"CVE-2026-6879","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6879","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-6879","date":"2026-11-09","epss":0.00355,"percentile":0.29482}],"urls":["https://github.com/python/cpython/commit/02c08e6b747ac43d0d866a4ffa916bedf3423f81","https://github.com/python/cpython/commit/037965c00a427cba5c05447efadc67c51a492e85","https://github.com/python/cpython/commit/0583f24ae678993e3f7939f51ad5bcae5ad9dc70","https://github.com/python/cpython/commit/2ffab083782968a4d732738f4f1dff6bbd69d2b0","https://github.com/python/cpython/commit/390337b8ba1658833fdef379e1739c9f9533a8db","https://github.com/python/cpython/commit/96510a3758f4a075f43223afdee3b6ee1a7a7f02","https://github.com/python/cpython/commit/cb409342a19f25656f62e679f8bac265fe1442c3","https://github.com/python/cpython/issues/152674","https://github.com/python/cpython/pull/152676","https://mail.python.org/archives/list/security-announce@python.org/thread/7YMZ6DDZVR26TJJBVO3RDNBAVGHNYAKR/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6879","description":"`Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, `[last()-N]`) on XML documents with many same-tag siblings. `Element.find()` is only affected when the first match is near the end  of the sibling list, such as with `[last()]` or `[last()-N]`;  `.//item[1]` short-circuits after the first match."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6879","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-6879","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6879","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-6879","date":"2026-11-09","epss":0.00355,"percentile":0.29482}],"risk":0.17750000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6879"},"relatedVulnerabilities":[{"id":"CVE-2026-6879","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6879","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-6879","date":"2026-11-09","epss":0.00355,"percentile":0.29482}],"urls":["https://github.com/python/cpython/commit/02c08e6b747ac43d0d866a4ffa916bedf3423f81","https://github.com/python/cpython/commit/037965c00a427cba5c05447efadc67c51a492e85","https://github.com/python/cpython/commit/0583f24ae678993e3f7939f51ad5bcae5ad9dc70","https://github.com/python/cpython/commit/2ffab083782968a4d732738f4f1dff6bbd69d2b0","https://github.com/python/cpython/commit/390337b8ba1658833fdef379e1739c9f9533a8db","https://github.com/python/cpython/commit/96510a3758f4a075f43223afdee3b6ee1a7a7f02","https://github.com/python/cpython/commit/cb409342a19f25656f62e679f8bac265fe1442c3","https://github.com/python/cpython/issues/152674","https://github.com/python/cpython/pull/152676","https://mail.python.org/archives/list/security-announce@python.org/thread/7YMZ6DDZVR26TJJBVO3RDNBAVGHNYAKR/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6879","description":"`Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, `[last()-N]`) on XML documents with many same-tag siblings. `Element.find()` is only affected when the first match is near the end  of the sibling list, such as with `[last()]` or `[last()-N]`;  `.//item[1]` short-circuits after the first match."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38343","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38343","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38343","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38343","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"risk":0.17750000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38343"},"relatedVulnerabilities":[{"id":"CVE-2026-38343","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38343","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38343","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21587"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38343","description":"An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38345","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38345","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38345","cwe":"CWE-369","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38345","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"risk":0.17750000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38345"},"relatedVulnerabilities":[{"id":"CVE-2026-38345","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38345","cwe":"CWE-369","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38345","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21585"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38345","description":"A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via a crafted input."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38343","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38343","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38343","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38343","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"risk":0.17750000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38343"},"relatedVulnerabilities":[{"id":"CVE-2026-38343","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38343","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38343","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21587"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38343","description":"An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38345","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38345","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38345","cwe":"CWE-369","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38345","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"risk":0.17750000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38345"},"relatedVulnerabilities":[{"id":"CVE-2026-38345","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38345","cwe":"CWE-369","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38345","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21585"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38345","description":"A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via a crafted input."}]},{"artifact":{"id":"d91603f9b213058a","cpes":["cpe:2.3:a:libjpeg-turbo8:libjpeg-turbo8:2.1.5-4ubuntu4:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg-turbo8:libjpeg_turbo8:2.1.5-4ubuntu4:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg_turbo8:libjpeg-turbo8:2.1.5-4ubuntu4:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg_turbo8:libjpeg_turbo8:2.1.5-4ubuntu4:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg:libjpeg-turbo8:2.1.5-4ubuntu4:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg:libjpeg_turbo8:2.1.5-4ubuntu4:*:*:*:*:*:*:*"],"name":"libjpeg-turbo8","purl":"pkg:deb/ubuntu/libjpeg-turbo8@2.1.5-4ubuntu4?arch=amd64&distro=ubuntu-26.04&upstream=libjpeg-turbo","type":"deb","version":"2.1.5-4ubuntu4","language":"","licenses":["BSD-3-clause","BSD-BY-LC-NE","Expat","NTP","Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libjpeg-turbo8/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libjpeg-turbo8/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libjpeg-turbo8:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libjpeg-turbo8:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libjpeg-turbo"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75466","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libjpeg-turbo","version":"2.1.5-4ubuntu4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-75466","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-75466","cwe":"CWE-369","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-75466","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"risk":0.17750000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-75466"},"relatedVulnerabilities":[{"id":"CVE-2026-75466","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75466","cwe":"CWE-369","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-75466","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"urls":["https://github.com/libjpeg-turbo/libjpeg-turbo/issues/911"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75466","description":"libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexed-color PNG image with a non-gray palette through tj3LoadImage12() or tj3LoadImage16() using the default pixel format, the application may trigger a division-by-zero in alloc_sarray(), causing a SIGFPE and denial of service."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38343","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38343","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38343","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38343","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"risk":0.17750000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38343"},"relatedVulnerabilities":[{"id":"CVE-2026-38343","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38343","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38343","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21587"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38343","description":"An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted video file."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-38345","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-38345","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-38345","cwe":"CWE-369","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38345","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"risk":0.17750000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-38345"},"relatedVulnerabilities":[{"id":"CVE-2026-38345","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-38345","cwe":"CWE-369","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-38345","date":"2026-11-09","epss":0.00355,"percentile":0.29422}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21585"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-38345","description":"A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via a crafted input."}]},{"artifact":{"id":"7c2a4c4f2edf104e","cpes":["cpe:2.3:a:libopenjp2-7:libopenjp2-7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7:2.5.4-1ubuntu0.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7","purl":"pkg:deb/ubuntu/libopenjp2-7@2.5.4-1ubuntu0.1?arch=amd64&distro=ubuntu-26.04&upstream=openjpeg2","type":"deb","version":"2.5.4-1ubuntu0.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libopenjp2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107080","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjpeg2","version":"2.5.4-1ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107080","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107080","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-107080","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107080","date":"2026-11-09","epss":0.00352,"percentile":0.29117}],"risk":0.17600000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107080"},"relatedVulnerabilities":[{"id":"CVE-2026-107080","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107080","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-107080","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107080","date":"2026-11-09","epss":0.00352,"percentile":0.29117}],"urls":["https://github.com/uclouvain/openjpeg/commit/a38e970fa59abd796c703ec469e578b09f7ffa33","https://github.com/uclouvain/openjpeg/issues/1673","https://github.com/uclouvain/openjpeg/pull/1674","https://www.openwall.com/lists/oss-security/2026/10/05/5","http://www.openwall.com/lists/oss-security/2026/10/24/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107080","description":"OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66037","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66037","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-11-09","epss":0.00349,"percentile":0.28765}],"risk":0.1745,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66037"},"relatedVulnerabilities":[{"id":"CVE-2026-66037","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-11-09","epss":0.00349,"percentile":0.28765}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/86708357d126af84c16f80d9c57335d1e8c845c5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23627","https://www.vulncheck.com/advisories/ffmpeg-iamf-demuxer-uncontrolled-resource-consumption-via-mix-presentation-obu"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66037","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted count_label field. The mix_presentation_obu() function in libavformat/iamf_parse.c calls av_calloc(count_label, sizeof(*language_label)) with an attacker-controlled value before validating available OBU data, enabling an allocation amplification of approximately 126 million bytes per input byte that exhausts process memory or triggers an OOM-kill during format probing."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66037","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66037","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-11-09","epss":0.00349,"percentile":0.28765}],"risk":0.1745,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66037"},"relatedVulnerabilities":[{"id":"CVE-2026-66037","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-11-09","epss":0.00349,"percentile":0.28765}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/86708357d126af84c16f80d9c57335d1e8c845c5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23627","https://www.vulncheck.com/advisories/ffmpeg-iamf-demuxer-uncontrolled-resource-consumption-via-mix-presentation-obu"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66037","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted count_label field. The mix_presentation_obu() function in libavformat/iamf_parse.c calls av_calloc(count_label, sizeof(*language_label)) with an attacker-controlled value before validating available OBU data, enabling an allocation amplification of approximately 126 million bytes per input byte that exhausts process memory or triggers an OOM-kill during format probing."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66037","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66037","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-11-09","epss":0.00349,"percentile":0.28765}],"risk":0.1745,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66037"},"relatedVulnerabilities":[{"id":"CVE-2026-66037","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66037","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66037","date":"2026-11-09","epss":0.00349,"percentile":0.28765}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/86708357d126af84c16f80d9c57335d1e8c845c5","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23627","https://www.vulncheck.com/advisories/ffmpeg-iamf-demuxer-uncontrolled-resource-consumption-via-mix-presentation-obu"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66037","description":"FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthenticated attacker to cause multi-gigabyte memory allocation from a 17-byte input file by supplying a crafted count_label field. The mix_presentation_obu() function in libavformat/iamf_parse.c calls av_calloc(count_label, sizeof(*language_label)) with an attacker-controlled value before validating available OBU data, enabling an allocation amplification of approximately 126 million bytes per input byte that exhausts process memory or triggers an OOM-kill during format probing."}]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15713","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15713","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15713","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15713","date":"2026-11-09","epss":0.00349,"percentile":0.28723}],"risk":0.1745,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15713"},"relatedVulnerabilities":[{"id":"CVE-2026-15713","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15713","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15713","date":"2026-11-09","epss":0.00349,"percentile":0.28723}],"urls":["https://access.redhat.com/security/cve/CVE-2026-15713","https://bugzilla.redhat.com/show_bug.cgi?id=2499941","https://gitlab.gnome.org/GNOME/libsoup/-/work_items/541"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15713","description":"A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated attacker acting as a malicious network peer can trick the connection engine into allocating stream states that are subsequently leaked during cleanup. Over a sustained period, this flaw allows the remote attacker to consume the system's heap allocations incrementally, triggering a denial of service (DoS) through an ultimate Out-of-Memory (OOM) application crash."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15713","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15713","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15713","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15713","date":"2026-11-09","epss":0.00349,"percentile":0.28723}],"risk":0.1745,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15713"},"relatedVulnerabilities":[{"id":"CVE-2026-15713","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15713","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15713","date":"2026-11-09","epss":0.00349,"percentile":0.28723}],"urls":["https://access.redhat.com/security/cve/CVE-2026-15713","https://bugzilla.redhat.com/show_bug.cgi?id=2499941","https://gitlab.gnome.org/GNOME/libsoup/-/work_items/541"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15713","description":"A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated attacker acting as a malicious network peer can trick the connection engine into allocating stream states that are subsequently leaked during cleanup. Over a sustained period, this flaw allows the remote attacker to consume the system's heap allocations incrementally, triggering a denial of service (DoS) through an ultimate Out-of-Memory (OOM) application crash."}]},{"artifact":{"id":"cd714f2b10ca1a58","cpes":["cpe:2.3:a:perl-base:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.40.1-7ubuntu0.3?arch=amd64&distro=ubuntu-26.04&upstream=perl","type":"deb","version":"5.40.1-7ubuntu0.3","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","FSFAP","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","LGPL-2.1","REGCOMP","REGCOMP,","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/perl-base.list"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7017","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"perl","version":"5.40.1-7ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-7017","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-7017","cwe":"CWE-522","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-7017","date":"2026-11-09","epss":0.00349,"percentile":0.28713}],"risk":0.1745,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-7017"},"relatedVulnerabilities":[{"id":"CVE-2026-7017","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7017","cwe":"CWE-522","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-7017","date":"2026-11-09","epss":0.00349,"percentile":0.28713}],"urls":["https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/84984ef3930ddd4afcf5eb83b40d3cee200739c3.patch","https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/8f32ca89e21c3ad0422adc698fa6ad17a193f55f.patch","https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/e7a03aedf2395158f2b0d3bad2df943349227bb3.patch","https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/pull/36","https://metacpan.org/release/HAARG/HTTP-Tiny-0.095-TRIAL/changes","http://www.openwall.com/lists/oss-security/2026/07/07/13"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7017","description":"HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets.\n\nWhen the server returns a 3xx redirect, `_maybe_redirect` follows the `Location:` header and `_prepare_headers_and_cb` re-merges the caller's `headers` argument into the new request, without checking whether the redirect target shares an origin with the original URL. Caller-supplied `Authorization`, `Cookie` and `Proxy-Authorization` headers are therefore re-sent to whatever host the redirect names, across scheme, host or port boundaries, and including `https` to `http` downgrades that expose them in plaintext on the wire.\n\nThe HTTP::Tiny POD note that \"Authorization headers will not be included in a redirected request\" applied only to the URL-userinfo Basic-auth path, not to headers passed explicitly by the caller."}]},{"artifact":{"id":"4c2c2b9acb3996f5","cpes":["cpe:2.3:a:cpp:cpp:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*"],"name":"cpp","purl":"pkg:deb/ubuntu/cpp@4%3A15.2.0-5ubuntu1?arch=amd64&distro=ubuntu-26.04&upstream=gcc-defaults%401.230ubuntu1","type":"deb","version":"4:15.2.0-5ubuntu1","language":"","licenses":["BSD-4-Clause","GPL-2.0-or-later"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/cpp-x86-64-linux-gnu/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/cpp/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp.list","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.list"},{"path":"/var/lib/dpkg/info/cpp.postinst","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.postinst"},{"path":"/var/lib/dpkg/info/cpp.postrm","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.postrm"},{"path":"/var/lib/dpkg/info/cpp.preinst","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.preinst"},{"path":"/var/lib/dpkg/info/cpp.prerm","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.prerm"}],"upstreams":[{"name":"gcc-defaults","version":"1.230ubuntu1"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gcc-defaults","version":"1.230ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-09","epss":0.00348,"percentile":0.28662}],"risk":0.174,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-102010"},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-09","epss":0.00348,"percentile":0.28662}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"493d4c4e9b5d7374","cpes":["cpe:2.3:a:cpp-x86-64-linux-gnu:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64-linux-gnu:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux_gnu:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux_gnu:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64-linux:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64-linux:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*"],"name":"cpp-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/cpp-x86-64-linux-gnu@4%3A15.2.0-5ubuntu1?arch=amd64&distro=ubuntu-26.04&upstream=gcc-defaults%401.230ubuntu1","type":"deb","version":"4:15.2.0-5ubuntu1","language":"","licenses":["BSD-4-Clause","GPL-2.0-or-later"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/cpp-x86-64-linux-gnu/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/cpp-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.list","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-defaults","version":"1.230ubuntu1"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gcc-defaults","version":"1.230ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-09","epss":0.00348,"percentile":0.28662}],"risk":0.174,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-102010"},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-09","epss":0.00348,"percentile":0.28662}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-12345","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-12345","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-12345","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-12345","date":"2026-11-09","epss":0.00344,"percentile":0.28136}],"risk":0.172,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-12345"},"relatedVulnerabilities":[{"id":"CVE-2026-12345","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12345","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-12345","date":"2026-11-09","epss":0.00344,"percentile":0.28136}],"urls":["https://github.com/python/cpython/commit/0478b52788117db4b831b3efd648f56b777628aa","https://github.com/python/cpython/commit/06ef3d43fdaf4da97af12fa694b4886092c4b970","https://github.com/python/cpython/commit/458e7134a5af7f86aee9d21b51cf499b41aa4420","https://github.com/python/cpython/commit/58ed0259cae509a19138795df302fe60b544dc74","https://github.com/python/cpython/commit/5c20517a4fc56683efe63a7751020db9573f538d","https://github.com/python/cpython/commit/c39b52d00b42200aaadff679e2fe3f1006d57c58","https://github.com/python/cpython/commit/e1f3590f155c6d66007e958c98c9d69316551993","https://github.com/python/cpython/issues/157579","https://github.com/python/cpython/pull/157580","http://www.openwall.com/lists/oss-security/2026/09/29/40"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12345","description":"The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-12345","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-12345","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-12345","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-12345","date":"2026-11-09","epss":0.00344,"percentile":0.28136}],"risk":0.172,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-12345"},"relatedVulnerabilities":[{"id":"CVE-2026-12345","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12345","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-12345","date":"2026-11-09","epss":0.00344,"percentile":0.28136}],"urls":["https://github.com/python/cpython/commit/0478b52788117db4b831b3efd648f56b777628aa","https://github.com/python/cpython/commit/06ef3d43fdaf4da97af12fa694b4886092c4b970","https://github.com/python/cpython/commit/458e7134a5af7f86aee9d21b51cf499b41aa4420","https://github.com/python/cpython/commit/58ed0259cae509a19138795df302fe60b544dc74","https://github.com/python/cpython/commit/5c20517a4fc56683efe63a7751020db9573f538d","https://github.com/python/cpython/commit/c39b52d00b42200aaadff679e2fe3f1006d57c58","https://github.com/python/cpython/commit/e1f3590f155c6d66007e958c98c9d69316551993","https://github.com/python/cpython/issues/157579","https://github.com/python/cpython/pull/157580","http://www.openwall.com/lists/oss-security/2026/09/29/40"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12345","description":"The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-12345","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-12345","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-12345","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-12345","date":"2026-11-09","epss":0.00344,"percentile":0.28136}],"risk":0.172,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-12345"},"relatedVulnerabilities":[{"id":"CVE-2026-12345","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12345","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-12345","date":"2026-11-09","epss":0.00344,"percentile":0.28136}],"urls":["https://github.com/python/cpython/commit/0478b52788117db4b831b3efd648f56b777628aa","https://github.com/python/cpython/commit/06ef3d43fdaf4da97af12fa694b4886092c4b970","https://github.com/python/cpython/commit/458e7134a5af7f86aee9d21b51cf499b41aa4420","https://github.com/python/cpython/commit/58ed0259cae509a19138795df302fe60b544dc74","https://github.com/python/cpython/commit/5c20517a4fc56683efe63a7751020db9573f538d","https://github.com/python/cpython/commit/c39b52d00b42200aaadff679e2fe3f1006d57c58","https://github.com/python/cpython/commit/e1f3590f155c6d66007e958c98c9d69316551993","https://github.com/python/cpython/issues/157579","https://github.com/python/cpython/pull/157580","http://www.openwall.com/lists/oss-security/2026/09/29/40"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12345","description":"The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-12345","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-12345","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-12345","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-12345","date":"2026-11-09","epss":0.00344,"percentile":0.28136}],"risk":0.172,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-12345"},"relatedVulnerabilities":[{"id":"CVE-2026-12345","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12345","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-12345","date":"2026-11-09","epss":0.00344,"percentile":0.28136}],"urls":["https://github.com/python/cpython/commit/0478b52788117db4b831b3efd648f56b777628aa","https://github.com/python/cpython/commit/06ef3d43fdaf4da97af12fa694b4886092c4b970","https://github.com/python/cpython/commit/458e7134a5af7f86aee9d21b51cf499b41aa4420","https://github.com/python/cpython/commit/58ed0259cae509a19138795df302fe60b544dc74","https://github.com/python/cpython/commit/5c20517a4fc56683efe63a7751020db9573f538d","https://github.com/python/cpython/commit/c39b52d00b42200aaadff679e2fe3f1006d57c58","https://github.com/python/cpython/commit/e1f3590f155c6d66007e958c98c9d69316551993","https://github.com/python/cpython/issues/157579","https://github.com/python/cpython/pull/157580","http://www.openwall.com/lists/oss-security/2026/09/29/40"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12345","description":"The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-12345","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-12345","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-12345","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-12345","date":"2026-11-09","epss":0.00344,"percentile":0.28136}],"risk":0.172,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-12345"},"relatedVulnerabilities":[{"id":"CVE-2026-12345","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12345","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-12345","date":"2026-11-09","epss":0.00344,"percentile":0.28136}],"urls":["https://github.com/python/cpython/commit/0478b52788117db4b831b3efd648f56b777628aa","https://github.com/python/cpython/commit/06ef3d43fdaf4da97af12fa694b4886092c4b970","https://github.com/python/cpython/commit/458e7134a5af7f86aee9d21b51cf499b41aa4420","https://github.com/python/cpython/commit/58ed0259cae509a19138795df302fe60b544dc74","https://github.com/python/cpython/commit/5c20517a4fc56683efe63a7751020db9573f538d","https://github.com/python/cpython/commit/c39b52d00b42200aaadff679e2fe3f1006d57c58","https://github.com/python/cpython/commit/e1f3590f155c6d66007e958c98c9d69316551993","https://github.com/python/cpython/issues/157579","https://github.com/python/cpython/pull/157580","http://www.openwall.com/lists/oss-security/2026/09/29/40"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12345","description":"The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms."}]},{"artifact":{"id":"ae315a17f37be61f","cpes":["cpe:2.3:a:glib-networking:glib-networking:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib-networking:glib_networking:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib_networking:glib-networking:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib_networking:glib_networking:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib:glib-networking:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib:glib_networking:2.80.1-1build2:*:*:*:*:*:*:*"],"name":"glib-networking","purl":"pkg:deb/ubuntu/glib-networking@2.80.1-1build2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"2.80.1-1build2","language":"","licenses":["LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/glib-networking/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/glib-networking/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/glib-networking:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/glib-networking:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-103963","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"glib-networking","version":"2.80.1-1build2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-103963","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-103963","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-103963","date":"2026-11-09","epss":0.00339,"percentile":0.27516}],"risk":0.16949999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-103963"},"relatedVulnerabilities":[{"id":"CVE-2026-103963","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103963","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-103963","date":"2026-11-09","epss":0.00339,"percentile":0.27516}],"urls":["https://access.redhat.com/security/cve/CVE-2026-103963","https://bugzilla.redhat.com/show_bug.cgi?id=2465656","https://gitlab.gnome.org/GNOME/glib-networking/-/merge_requests/288"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103963","description":"A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the client-side session cache does not limit the number of session tickets retained for a single host. A malicious server can exploit this by sending excessive session ticket messages, causing the client application to continuously consume memory. This unbounded memory growth can exhaust system memory, resulting in a Denial of Service (DoS)."}]},{"artifact":{"id":"1bb484bc4921c4ff","cpes":["cpe:2.3:a:glib-networking-common:glib-networking-common:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib-networking-common:glib_networking_common:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib_networking_common:glib-networking-common:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib_networking_common:glib_networking_common:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib-networking:glib-networking-common:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib-networking:glib_networking_common:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib_networking:glib-networking-common:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib_networking:glib_networking_common:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib:glib-networking-common:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib:glib_networking_common:2.80.1-1build2:*:*:*:*:*:*:*"],"name":"glib-networking-common","purl":"pkg:deb/ubuntu/glib-networking-common@2.80.1-1build2?arch=all&distro=ubuntu-26.04&upstream=glib-networking","type":"deb","version":"2.80.1-1build2","language":"","licenses":["LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/glib-networking-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/glib-networking-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/glib-networking-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/glib-networking-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/glib-networking-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/glib-networking-common.list"}],"upstreams":[{"name":"glib-networking"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-103963","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"glib-networking","version":"2.80.1-1build2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-103963","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-103963","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-103963","date":"2026-11-09","epss":0.00339,"percentile":0.27516}],"risk":0.16949999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-103963"},"relatedVulnerabilities":[{"id":"CVE-2026-103963","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103963","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-103963","date":"2026-11-09","epss":0.00339,"percentile":0.27516}],"urls":["https://access.redhat.com/security/cve/CVE-2026-103963","https://bugzilla.redhat.com/show_bug.cgi?id=2465656","https://gitlab.gnome.org/GNOME/glib-networking/-/merge_requests/288"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103963","description":"A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the client-side session cache does not limit the number of session tickets retained for a single host. A malicious server can exploit this by sending excessive session ticket messages, causing the client application to continuously consume memory. This unbounded memory growth can exhaust system memory, resulting in a Denial of Service (DoS)."}]},{"artifact":{"id":"3fe876983cfd97b1","cpes":["cpe:2.3:a:glib-networking-services:glib-networking-services:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib-networking-services:glib_networking_services:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib_networking_services:glib-networking-services:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib_networking_services:glib_networking_services:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib-networking:glib-networking-services:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib-networking:glib_networking_services:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib_networking:glib-networking-services:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib_networking:glib_networking_services:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib:glib-networking-services:2.80.1-1build2:*:*:*:*:*:*:*","cpe:2.3:a:glib:glib_networking_services:2.80.1-1build2:*:*:*:*:*:*:*"],"name":"glib-networking-services","purl":"pkg:deb/ubuntu/glib-networking-services@2.80.1-1build2?arch=amd64&distro=ubuntu-26.04&upstream=glib-networking","type":"deb","version":"2.80.1-1build2","language":"","licenses":["LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/glib-networking-services/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/glib-networking-services/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/glib-networking-services.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/glib-networking-services.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/glib-networking-services.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/glib-networking-services.list"}],"upstreams":[{"name":"glib-networking"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-103963","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"glib-networking","version":"2.80.1-1build2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-103963","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-103963","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-103963","date":"2026-11-09","epss":0.00339,"percentile":0.27516}],"risk":0.16949999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-103963"},"relatedVulnerabilities":[{"id":"CVE-2026-103963","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103963","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-103963","date":"2026-11-09","epss":0.00339,"percentile":0.27516}],"urls":["https://access.redhat.com/security/cve/CVE-2026-103963","https://bugzilla.redhat.com/show_bug.cgi?id=2465656","https://gitlab.gnome.org/GNOME/glib-networking/-/merge_requests/288"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103963","description":"A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the client-side session cache does not limit the number of session tickets retained for a single host. A malicious server can exploit this by sending excessive session ticket messages, causing the client application to continuously consume memory. This unbounded memory growth can exhaust system memory, resulting in a Denial of Service (DoS)."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-30997","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-30997","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-30997","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30997","date":"2026-11-09","epss":0.00337,"percentile":0.27311}],"risk":0.1685,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-30997"},"relatedVulnerabilities":[{"id":"CVE-2026-30997","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-30997","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30997","date":"2026-11-09","epss":0.00337,"percentile":0.27311}],"urls":["https://excellent-oatmeal-319.notion.site/CVE-2026-30997-Out-of-Bounds-Access-a7929817b9794568b2f7774397c7d65f","https://github.com/FFmpeg/FFmpeg"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-30997","description":"An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-30997","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-30997","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-30997","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30997","date":"2026-11-09","epss":0.00337,"percentile":0.27311}],"risk":0.1685,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-30997"},"relatedVulnerabilities":[{"id":"CVE-2026-30997","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-30997","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30997","date":"2026-11-09","epss":0.00337,"percentile":0.27311}],"urls":["https://excellent-oatmeal-319.notion.site/CVE-2026-30997-Out-of-Bounds-Access-a7929817b9794568b2f7774397c7d65f","https://github.com/FFmpeg/FFmpeg"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-30997","description":"An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-30997","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-30997","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-30997","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30997","date":"2026-11-09","epss":0.00337,"percentile":0.27311}],"risk":0.1685,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-30997"},"relatedVulnerabilities":[{"id":"CVE-2026-30997","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-30997","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-30997","date":"2026-11-09","epss":0.00337,"percentile":0.27311}],"urls":["https://excellent-oatmeal-319.notion.site/CVE-2026-30997-Out-of-Bounds-Access-a7929817b9794568b2f7774397c7d65f","https://github.com/FFmpeg/FFmpeg"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-30997","description":"An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64832","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-11-09","epss":0.00335,"percentile":0.27028}],"risk":0.1675,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64832"},"relatedVulnerabilities":[{"id":"CVE-2026-64832","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-11-09","epss":0.00335,"percentile":0.27028}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64832","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-11-09","epss":0.00335,"percentile":0.27028}],"risk":0.1675,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64832"},"relatedVulnerabilities":[{"id":"CVE-2026-64832","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-11-09","epss":0.00335,"percentile":0.27028}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-64832","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-64832","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-11-09","epss":0.00335,"percentile":0.27028}],"risk":0.1675,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-64832"},"relatedVulnerabilities":[{"id":"CVE-2026-64832","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-64832","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-64832","date":"2026-11-09","epss":0.00335,"percentile":0.27028}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664","https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-64832","description":"FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding."}]},{"artifact":{"id":"60af6de63c33b882","cpes":["cpe:2.3:a:python3-pip-whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*"],"name":"python3-pip-whl","purl":"pkg:deb/ubuntu/python3-pip-whl@25.1.1%2Bdfsg-1ubuntu2?arch=all&distro=ubuntu-26.04&upstream=python-pip","type":"deb","version":"25.1.1+dfsg-1ubuntu2","language":"","licenses":["Apache-2.0","BSD-2","BSD-3","Expat","ISC","MPL-2","MPL-2.0","Python"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-pip-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-pip-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.list"}],"upstreams":[{"name":"python-pip"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-97689","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python-pip","version":"25.1.1+dfsg-1ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-97689","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-97689","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-97689","date":"2026-11-09","epss":0.00335,"percentile":0.27015}],"risk":0.1675,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-97689"},"relatedVulnerabilities":[{"id":"CVE-2026-97689","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97689","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-97689","date":"2026-11-09","epss":0.00335,"percentile":0.27015}],"urls":["https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed","https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97689","description":"urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long unterminated chunk-size line. The impact is that unbounded memory allocation can exhaust the client process. This issue is fixed in version 2.8.0."}]},{"artifact":{"id":"825e401acfd213c2","cpes":["cpe:2.3:a:xserver-common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver-common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xserver-common","purl":"pkg:deb/ubuntu/xserver-common@2%3A21.1.22-1ubuntu1.3?arch=all&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xserver-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xserver-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-55999","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-55999","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-55999","cwe":"CWE-122","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-55999","date":"2026-11-09","epss":0.00333,"percentile":0.26717}],"risk":0.1665,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-55999"},"relatedVulnerabilities":[{"id":"CVE-2026-55999","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"meissner@suse.de","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.5,"impactScore":6.1,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55999","cwe":"CWE-122","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-55999","date":"2026-11-09","epss":0.00333,"percentile":0.26717}],"urls":["https://gitlab.freedesktop.org/xorg/xserver/-/commit/fbf7bac22e2c6bd627fb042742a23318263edae1","https://www.openwall.com/lists/oss-security/2026/07/08/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55999","description":"Local attackers with a X connection able to provide PCX fonts to the X \nserver xorg-server before 21.2.24 and xwayland before 24.1.13 could \ncause a heap buffer overflow via SetFont due to missing glyph boundary checks."}]},{"artifact":{"id":"e55ab909ded790e2","cpes":["cpe:2.3:a:xvfb:xvfb:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xvfb","purl":"pkg:deb/ubuntu/xvfb@2%3A21.1.22-1ubuntu1.3?arch=amd64&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xvfb/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xvfb/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-55999","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-55999","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-55999","cwe":"CWE-122","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-55999","date":"2026-11-09","epss":0.00333,"percentile":0.26717}],"risk":0.1665,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-55999"},"relatedVulnerabilities":[{"id":"CVE-2026-55999","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"meissner@suse.de","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.5,"impactScore":6.1,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55999","cwe":"CWE-122","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-55999","date":"2026-11-09","epss":0.00333,"percentile":0.26717}],"urls":["https://gitlab.freedesktop.org/xorg/xserver/-/commit/fbf7bac22e2c6bd627fb042742a23318263edae1","https://www.openwall.com/lists/oss-security/2026/07/08/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55999","description":"Local attackers with a X connection able to provide PCX fonts to the X \nserver xorg-server before 21.2.24 and xwayland before 24.1.13 could \ncause a heap buffer overflow via SetFont due to missing glyph boundary checks."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91396","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91396","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91396","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91396","date":"2026-11-09","epss":0.00333,"percentile":0.26679}],"risk":0.1665,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91396"},"relatedVulnerabilities":[{"id":"CVE-2026-91396","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91396","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91396","date":"2026-11-09","epss":0.00333,"percentile":0.26679}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91396","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91396","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91396","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91396","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91396","date":"2026-11-09","epss":0.00333,"percentile":0.26679}],"risk":0.1665,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91396"},"relatedVulnerabilities":[{"id":"CVE-2026-91396","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91396","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91396","date":"2026-11-09","epss":0.00333,"percentile":0.26679}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91396","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-65703","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-11-09","epss":0.00332,"percentile":0.26567}],"risk":0.166,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-65703"},"relatedVulnerabilities":[{"id":"CVE-2026-65703","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-11-09","epss":0.00332,"percentile":0.26567}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-65703","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-11-09","epss":0.00332,"percentile":0.26567}],"risk":0.166,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-65703"},"relatedVulnerabilities":[{"id":"CVE-2026-65703","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-11-09","epss":0.00332,"percentile":0.26567}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-65703","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-65703","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-11-09","epss":0.00332,"percentile":0.26567}],"risk":0.166,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-65703"},"relatedVulnerabilities":[{"id":"CVE-2026-65703","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65703","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-65703","date":"2026-11-09","epss":0.00332,"percentile":0.26567}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-tdsc-video-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65703","description":"FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying a crafted AVI file that changes frame dimensions across TDSF frames. The tdsc_parse_tdsf() function fails to unreference the existing reference frame before calling av_frame_get_buffer(), causing tdsc_blit() and tdsc_yuv2rgb() to write attacker-controlled pixel data beyond the end of the undersized reference frame buffer, resulting in a process crash and potential code execution."}]},{"artifact":{"id":"60af6de63c33b882","cpes":["cpe:2.3:a:python3-pip-whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*"],"name":"python3-pip-whl","purl":"pkg:deb/ubuntu/python3-pip-whl@25.1.1%2Bdfsg-1ubuntu2?arch=all&distro=ubuntu-26.04&upstream=python-pip","type":"deb","version":"25.1.1+dfsg-1ubuntu2","language":"","licenses":["Apache-2.0","BSD-2","BSD-3","Expat","ISC","MPL-2","MPL-2.0","Python"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-pip-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-pip-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.list"}],"upstreams":[{"name":"python-pip"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-44431","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python-pip","version":"25.1.1+dfsg-1ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-44431","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-44431","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-44431","date":"2026-11-09","epss":0.00331,"percentile":0.26491}],"risk":0.1655,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-44431"},"relatedVulnerabilities":[{"id":"CVE-2026-44431","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-44431","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-44431","date":"2026-11-09","epss":0.00331,"percentile":0.26491}],"urls":["https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc","https://lists.debian.org/debian-lts-announce/2026/06/msg00040.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-44431","description":"urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0."}]},{"artifact":{"id":"e621b8e011c3dd21","cpes":["cpe:2.3:a:libcups2t64:libcups2t64:2.4.16-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"libcups2t64","purl":"pkg:deb/ubuntu/libcups2t64@2.4.16-1ubuntu1.3?arch=amd64&distro=ubuntu-26.04&upstream=cups","type":"deb","version":"2.4.16-1ubuntu1.3","language":"","licenses":["Apache-2.0","Apache-2.0-with-GPL2-LGPL2-Exception","BSD-2-Clause","FSFUL","Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcups2t64/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libcups2t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcups2t64:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libcups2t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cups"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87876","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"cups","version":"2.4.16-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87876","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87876","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-87876","date":"2026-11-09","epss":0.00328,"percentile":0.26062}],"risk":0.164,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87876"},"relatedVulnerabilities":[{"id":"CVE-2026-87876","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3,"impactScore":1.5,"exploitabilityScore":1.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87876","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-87876","date":"2026-11-09","epss":0.00328,"percentile":0.26062}],"urls":["https://access.redhat.com/errata/RHSA-2026:67568","https://access.redhat.com/security/cve/CVE-2026-87876","https://bugzilla.redhat.com/show_bug.cgi?id=2530991","https://github.com/OpenPrinting/cups/commit/88e67c00c130a45f3a1edf36686f7a0b2982fef8","https://github.com/OpenPrinting/cups/commit/f56844dbe4a54a9f8e1aeb3b913fbee614156bdb","https://github.com/OpenPrinting/cups/security/advisories/GHSA-r8jp-q6fh-g5r2"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87876","description":"Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer ACL validation and private-attribute filtering) could allow bypass of username-based access controls in certain configurations."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83395","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83395","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83395","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83395","date":"2026-11-09","epss":0.00327,"percentile":0.26002}],"risk":0.1635,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83395"},"relatedVulnerabilities":[{"id":"CVE-2026-83395","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83395","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83395","date":"2026-11-09","epss":0.00327,"percentile":0.26002}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83395","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83395","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83395","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83395","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83395","date":"2026-11-09","epss":0.00327,"percentile":0.26002}],"risk":0.1635,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83395"},"relatedVulnerabilities":[{"id":"CVE-2026-83395","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83395","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83395","date":"2026-11-09","epss":0.00327,"percentile":0.26002}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83395","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-09","epss":0.00327,"percentile":0.25992}],"risk":0.1635,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-09","epss":0.00327,"percentile":0.25992}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-09","epss":0.00327,"percentile":0.25992}],"risk":0.1635,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-09","epss":0.00327,"percentile":0.25992}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-09","epss":0.00327,"percentile":0.25992}],"risk":0.1635,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-09","epss":0.00327,"percentile":0.25992}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-09","epss":0.00327,"percentile":0.25992}],"risk":0.1635,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-09","epss":0.00327,"percentile":0.25992}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83380","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83380","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83380","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83380","date":"2026-11-09","epss":0.00325,"percentile":0.25734}],"risk":0.1625,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83380"},"relatedVulnerabilities":[{"id":"CVE-2026-83380","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83380","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83380","date":"2026-11-09","epss":0.00325,"percentile":0.25734}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83380","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83380","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83380","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83380","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83380","date":"2026-11-09","epss":0.00325,"percentile":0.25734}],"risk":0.1625,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83380"},"relatedVulnerabilities":[{"id":"CVE-2026-83380","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83380","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83380","date":"2026-11-09","epss":0.00325,"percentile":0.25734}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83380","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"164b170cdee0b5fb","cpes":["cpe:2.3:a:libsndfile1:libsndfile1:1.2.2-4:*:*:*:*:*:*:*"],"name":"libsndfile1","purl":"pkg:deb/ubuntu/libsndfile1@1.2.2-4?arch=amd64&distro=ubuntu-26.04&upstream=libsndfile","type":"deb","version":"1.2.2-4","language":"","licenses":["Apache-2.0","BSD-2-clause","BSD-3-clause","FSFAP","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","NTP","gsm","sun"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsndfile1/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/libsndfile1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsndfile1:amd64.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/libsndfile1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsndfile"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-50613","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsndfile","version":"1.2.2-4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2024-50613","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2024-50613","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-50613","cwe":"CWE-617","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-50613","date":"2026-11-09","epss":0.0054,"percentile":0.45713}],"risk":0.162,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-50613"},"relatedVulnerabilities":[{"id":"CVE-2024-50613","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-50613","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-50613","cwe":"CWE-617","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-50613","date":"2026-11-09","epss":0.0054,"percentile":0.45713}],"urls":["https://github.com/libsndfile/libsndfile/issues/1034"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-50613","description":"libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close."}]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-2708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-2708","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-2708","cwe":"CWE-444","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-2708","date":"2026-11-09","epss":0.00321,"percentile":0.25325}],"risk":0.1605,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-2708"},"relatedVulnerabilities":[{"id":"CVE-2026-2708","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-2708","cwe":"CWE-444","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-2708","date":"2026-11-09","epss":0.00321,"percentile":0.25325}],"urls":["https://access.redhat.com/security/cve/CVE-2026-2708","https://bugzilla.redhat.com/show_bug.cgi?id=2440743","https://gitlab.gnome.org/GNOME/libsoup/-/issues/500","https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/513"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-2708","description":"A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP requests containing multiple Content-Length headers with differing values."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-2708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-2708","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-2708","cwe":"CWE-444","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-2708","date":"2026-11-09","epss":0.00321,"percentile":0.25325}],"risk":0.1605,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-2708"},"relatedVulnerabilities":[{"id":"CVE-2026-2708","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-2708","cwe":"CWE-444","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-2708","date":"2026-11-09","epss":0.00321,"percentile":0.25325}],"urls":["https://access.redhat.com/security/cve/CVE-2026-2708","https://bugzilla.redhat.com/show_bug.cgi?id=2440743","https://gitlab.gnome.org/GNOME/libsoup/-/issues/500","https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/513"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-2708","description":"A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_common() function in libsoup/soup-message-headers.c unconditionally appends each header value without validating for duplicate or conflicting Content-Length fields. This allows an attacker to send HTTP requests containing multiple Content-Length headers with differing values."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6599","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6599","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94448","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94448","date":"2026-11-09","epss":0.00289,"percentile":0.2158}],"risk":0.160395,"urls":["https://go.dev/issue/81821","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/839866","description":"When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression.\n\nWe now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped."},"relatedVulnerabilities":[{"id":"CVE-2026-94448","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94448","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94448","date":"2026-11-09","epss":0.00289,"percentile":0.2158}],"urls":["https://go.dev/cl/839866","https://go.dev/issue/81821","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6599"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94448","description":"When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped."}]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6599","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6599","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94448","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94448","date":"2026-11-09","epss":0.00289,"percentile":0.2158}],"risk":0.160395,"urls":["https://go.dev/issue/81821","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/839866","description":"When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression.\n\nWe now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped."},"relatedVulnerabilities":[{"id":"CVE-2026-94448","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94448","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94448","date":"2026-11-09","epss":0.00289,"percentile":0.2158}],"urls":["https://go.dev/cl/839866","https://go.dev/issue/81821","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6599"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94448","description":"When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are accurately recognized and escaped."}]},{"artifact":{"id":"8ee0d9664ec385d1","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/local/bin/envsubst","layerID":"sha256:57075c63557ce68113e2c1017ed64319f761803f8f492a02eae04ca946312aed","accessPath":"/usr/local/bin/envsubst","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6600","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6600","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97030","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97030","date":"2026-11-09","epss":0.00289,"percentile":0.2158}],"risk":0.160395,"urls":["https://go.dev/issue/81823","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/840925","description":"A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped.\n\nWe now ensure that valid keyword uses are escaped and non-keyword uses are not escaped."},"relatedVulnerabilities":[{"id":"CVE-2026-97030","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97030","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97030","date":"2026-11-09","epss":0.00289,"percentile":0.2158}],"urls":["https://go.dev/cl/840925","https://go.dev/issue/81823","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6600"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97030","description":"A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped."}]},{"artifact":{"id":"3e04f115eaa63598","cpes":["cpe:2.3:a:golang:go:1.27.1:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.1","type":"go-module","version":"go1.27.1","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.1"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6600","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.1"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6600","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97030","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97030","date":"2026-11-09","epss":0.00289,"percentile":0.2158}],"risk":0.160395,"urls":["https://go.dev/issue/81823","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/840925","description":"A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped.\n\nWe now ensure that valid keyword uses are escaped and non-keyword uses are not escaped."},"relatedVulnerabilities":[{"id":"CVE-2026-97030","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97030","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97030","date":"2026-11-09","epss":0.00289,"percentile":0.2158}],"urls":["https://go.dev/cl/840925","https://go.dev/issue/81823","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6600"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97030","description":"A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped."}]},{"artifact":{"id":"60af6de63c33b882","cpes":["cpe:2.3:a:python3-pip-whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*"],"name":"python3-pip-whl","purl":"pkg:deb/ubuntu/python3-pip-whl@25.1.1%2Bdfsg-1ubuntu2?arch=all&distro=ubuntu-26.04&upstream=python-pip","type":"deb","version":"25.1.1+dfsg-1ubuntu2","language":"","licenses":["Apache-2.0","BSD-2","BSD-3","Expat","ISC","MPL-2","MPL-2.0","Python"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-pip-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-pip-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.list"}],"upstreams":[{"name":"python-pip"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8643","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python-pip","version":"25.1.1+dfsg-1ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-8643","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-8643","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-8643","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-8643","date":"2026-11-09","epss":0.0032,"percentile":0.25162}],"risk":0.16,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-8643"},"relatedVulnerabilities":[{"id":"CVE-2026-8643","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8643","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-8643","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-8643","date":"2026-11-09","epss":0.0032,"percentile":0.25162}],"urls":["https://github.com/pypa/pip/pull/14000","https://mail.python.org/archives/list/security-announce@python.org/thread/YV63UET5D3OOJY7O4M5XCVYO2YM4NBYJ/","http://www.openwall.com/lists/oss-security/2026/06/01/5","https://access.redhat.com/errata/RHSA-2026:33313","https://access.redhat.com/errata/RHSA-2026:34374","https://access.redhat.com/errata/RHSA-2026:34456","https://access.redhat.com/errata/RHSA-2026:34739","https://access.redhat.com/errata/RHSA-2026:34740","https://access.redhat.com/errata/RHSA-2026:34741","https://access.redhat.com/errata/RHSA-2026:34748","https://access.redhat.com/errata/RHSA-2026:34749","https://access.redhat.com/errata/RHSA-2026:34750","https://access.redhat.com/errata/RHSA-2026:34752","https://access.redhat.com/errata/RHSA-2026:34756","https://access.redhat.com/errata/RHSA-2026:34758","https://access.redhat.com/errata/RHSA-2026:34760","https://access.redhat.com/errata/RHSA-2026:34765","https://access.redhat.com/errata/RHSA-2026:34772","https://access.redhat.com/errata/RHSA-2026:34773","https://access.redhat.com/errata/RHSA-2026:34774","https://access.redhat.com/errata/RHSA-2026:34775","https://access.redhat.com/errata/RHSA-2026:34776","https://access.redhat.com/errata/RHSA-2026:34777","https://access.redhat.com/errata/RHSA-2026:34778","https://access.redhat.com/errata/RHSA-2026:34780","https://access.redhat.com/errata/RHSA-2026:34891","https://access.redhat.com/errata/RHSA-2026:36193","https://access.redhat.com/errata/RHSA-2026:36315","https://access.redhat.com/errata/RHSA-2026:37275","https://access.redhat.com/errata/RHSA-2026:37283","https://access.redhat.com/errata/RHSA-2026:42078","https://access.redhat.com/errata/RHSA-2026:42079","https://access.redhat.com/errata/RHSA-2026:42132","https://access.redhat.com/errata/RHSA-2026:42144","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:50479","https://access.redhat.com/errata/RHSA-2026:54760","https://access.redhat.com/errata/RHSA-2026:56347","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/security/cve/CVE-2026-8643","https://bugzilla.redhat.com/show_bug.cgi?id=2460927","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8643.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8643","description":"pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory."}]},{"artifact":{"id":"750d0316e4cb0212","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.7.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.7.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=expat","type":"deb","version":"2.7.4-1ubuntu0.2","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-77214","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"expat","version":"2.7.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-77214","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-77214","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-77214","date":"2026-11-09","epss":0.0032,"percentile":0.2513}],"risk":0.16,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-77214"},"relatedVulnerabilities":[{"id":"CVE-2026-77214","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77214","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-77214","date":"2026-11-09","epss":0.0032,"percentile":0.2513}],"urls":["https://github.com/libexpat/libexpat/commit/13c5f63a7f1c52c2feee3b16a1134d4fb68e9ea0","https://github.com/libexpat/libexpat/pull/1393","https://www.vulncheck.com/advisories/libexpat-heap-buffer-over-read-in-xmlparse-c-via-xml-parsebuffer"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77214","description":"libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XML_ParseBuffer advances the parse buffer end with parser->m_bufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XML_ParseBuffer calls move m_bufferEnd past the end of the heap allocation and subsequent parsing reads out of bounds. Reaching this path requires a parse buffer to already be present; otherwise XML_ParseBuffer returns XML_ERROR_NO_BUFFER. A buffer is present after a prior call to XML_GetBuffer, either directly (the common case) or indirectly through a prior XML_Parse call that allocates the buffer internally. The over-read discloses adjacent heap memory to the calling application, recovering heap pointers, libc function pointers, and code pointers sufficient to defeat ASLR and build further exploitation primitives."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107697","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107697","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107697","cwe":"CWE-693","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107697","date":"2026-11-09","epss":0.00319,"percentile":0.25116}],"risk":0.1595,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107697"},"relatedVulnerabilities":[{"id":"CVE-2026-107697","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107697","cwe":"CWE-693","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107697","date":"2026-11-09","epss":0.00319,"percentile":0.25116}],"urls":["https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L834","https://github.com/FFmpeg/FFmpeg/commit/01044d04536e","https://github.com/FFmpeg/FFmpeg/commit/191715f0232c","https://github.com/FFmpeg/FFmpeg/commit/23602df9cd1b485c45ba6f533d3b85569de3f323","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-security-check-bypass-via-parse-playlist"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107697","description":"FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia local files, making parse_playlist() open resources the HLS security policy should block."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107697","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107697","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107697","cwe":"CWE-693","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107697","date":"2026-11-09","epss":0.00319,"percentile":0.25116}],"risk":0.1595,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107697"},"relatedVulnerabilities":[{"id":"CVE-2026-107697","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107697","cwe":"CWE-693","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107697","date":"2026-11-09","epss":0.00319,"percentile":0.25116}],"urls":["https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L834","https://github.com/FFmpeg/FFmpeg/commit/01044d04536e","https://github.com/FFmpeg/FFmpeg/commit/191715f0232c","https://github.com/FFmpeg/FFmpeg/commit/23602df9cd1b485c45ba6f533d3b85569de3f323","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-security-check-bypass-via-parse-playlist"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107697","description":"FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia local files, making parse_playlist() open resources the HLS security policy should block."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107697","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107697","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107697","cwe":"CWE-693","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107697","date":"2026-11-09","epss":0.00319,"percentile":0.25116}],"risk":0.1595,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107697"},"relatedVulnerabilities":[{"id":"CVE-2026-107697","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107697","cwe":"CWE-693","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107697","date":"2026-11-09","epss":0.00319,"percentile":0.25116}],"urls":["https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n8.1.2/libavformat/hls.c#L834","https://github.com/FFmpeg/FFmpeg/commit/01044d04536e","https://github.com/FFmpeg/FFmpeg/commit/191715f0232c","https://github.com/FFmpeg/FFmpeg/commit/23602df9cd1b485c45ba6f533d3b85569de3f323","https://www.vulncheck.com/advisories/ffmpeg-before-8.1.3-hls-demuxer-security-check-bypass-via-parse-playlist"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107697","description":"FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia local files, making parse_playlist() open resources the HLS security policy should block."}]},{"artifact":{"id":"4c2c2b9acb3996f5","cpes":["cpe:2.3:a:cpp:cpp:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*"],"name":"cpp","purl":"pkg:deb/ubuntu/cpp@4%3A15.2.0-5ubuntu1?arch=amd64&distro=ubuntu-26.04&upstream=gcc-defaults%401.230ubuntu1","type":"deb","version":"4:15.2.0-5ubuntu1","language":"","licenses":["BSD-4-Clause","GPL-2.0-or-later"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/cpp-x86-64-linux-gnu/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/cpp/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp.list","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.list"},{"path":"/var/lib/dpkg/info/cpp.postinst","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.postinst"},{"path":"/var/lib/dpkg/info/cpp.postrm","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.postrm"},{"path":"/var/lib/dpkg/info/cpp.preinst","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.preinst"},{"path":"/var/lib/dpkg/info/cpp.prerm","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp.prerm"}],"upstreams":[{"name":"gcc-defaults","version":"1.230ubuntu1"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115455","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gcc-defaults","version":"1.230ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-115455","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-115455","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-115455","date":"2026-11-09","epss":0.00314,"percentile":0.24457}],"risk":0.157,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-115455"},"relatedVulnerabilities":[{"id":"CVE-2026-115455","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115455","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-115455","date":"2026-11-09","epss":0.00314,"percentile":0.24457}],"urls":["https://access.redhat.com/errata/RHSA-2026:94989","https://access.redhat.com/security/cve/CVE-2026-115455","https://bugzilla.redhat.com/show_bug.cgi?id=2562933","https://gcc.gnu.org/cgit/gcc/commit/?id=5d419c69ce2e6b86d7da75f18736904885674219"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115455","description":"A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a stack-based buffer overflow leading denial of service (DoS)."}]},{"artifact":{"id":"493d4c4e9b5d7374","cpes":["cpe:2.3:a:cpp-x86-64-linux-gnu:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64-linux-gnu:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux_gnu:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux_gnu:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64-linux:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64-linux:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64_linux:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86-64:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86_64:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp-x86:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp_x86:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp-x86-64-linux-gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp_x86_64_linux_gnu:4\\:15.2.0-5ubuntu1:*:*:*:*:*:*:*"],"name":"cpp-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/cpp-x86-64-linux-gnu@4%3A15.2.0-5ubuntu1?arch=amd64&distro=ubuntu-26.04&upstream=gcc-defaults%401.230ubuntu1","type":"deb","version":"4:15.2.0-5ubuntu1","language":"","licenses":["BSD-4-Clause","GPL-2.0-or-later"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/cpp-x86-64-linux-gnu/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/cpp-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.list","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/cpp-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-defaults","version":"1.230ubuntu1"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115455","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gcc-defaults","version":"1.230ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-115455","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-115455","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-115455","date":"2026-11-09","epss":0.00314,"percentile":0.24457}],"risk":0.157,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-115455"},"relatedVulnerabilities":[{"id":"CVE-2026-115455","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115455","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-115455","date":"2026-11-09","epss":0.00314,"percentile":0.24457}],"urls":["https://access.redhat.com/errata/RHSA-2026:94989","https://access.redhat.com/security/cve/CVE-2026-115455","https://bugzilla.redhat.com/show_bug.cgi?id=2562933","https://gcc.gnu.org/cgit/gcc/commit/?id=5d419c69ce2e6b86d7da75f18736904885674219"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115455","description":"A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a stack-based buffer overflow leading denial of service (DoS)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-61308","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-61308","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-61308","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-61308","date":"2026-11-09","epss":0.0031,"percentile":0.24018}],"risk":0.155,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-61308"},"relatedVulnerabilities":[{"id":"CVE-2026-61308","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.8,"impactScore":4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-61308","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-61308","date":"2026-11-09","epss":0.0031,"percentile":0.24018}],"urls":["https://www.oracle.com/security-alerts/cspuaug2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-08-18"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-61308","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-61308","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-61308","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-61308","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-61308","date":"2026-11-09","epss":0.0031,"percentile":0.24018}],"risk":0.155,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-61308"},"relatedVulnerabilities":[{"id":"CVE-2026-61308","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.8,"impactScore":4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-61308","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-61308","date":"2026-11-09","epss":0.0031,"percentile":0.24018}],"urls":["https://www.oracle.com/security-alerts/cspuaug2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-08-18"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-61308","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-09","epss":0.00308,"percentile":0.23833}],"risk":0.154,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-09","epss":0.00308,"percentile":0.23833}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-09","epss":0.00308,"percentile":0.23833}],"risk":0.154,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-09","epss":0.00308,"percentile":0.23833}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"825e401acfd213c2","cpes":["cpe:2.3:a:xserver-common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver-common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xserver-common","purl":"pkg:deb/ubuntu/xserver-common@2%3A21.1.22-1ubuntu1.3?arch=all&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xserver-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xserver-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-56000","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-56000","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-56000","cwe":"CWE-416","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-56000","date":"2026-11-09","epss":0.00308,"percentile":0.23799}],"risk":0.154,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-56000"},"relatedVulnerabilities":[{"id":"CVE-2026-56000","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"meissner@suse.de","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56000","cwe":"CWE-416","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-56000","date":"2026-11-09","epss":0.00308,"percentile":0.23799}],"urls":["https://gitlab.freedesktop.org/xorg/xserver/-/commit/2779affbdb4354e894f490e56f962527d6125043","https://www.openwall.com/lists/oss-security/2026/07/08/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56000","description":"Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory."}]},{"artifact":{"id":"e55ab909ded790e2","cpes":["cpe:2.3:a:xvfb:xvfb:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xvfb","purl":"pkg:deb/ubuntu/xvfb@2%3A21.1.22-1ubuntu1.3?arch=amd64&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xvfb/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xvfb/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-56000","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-56000","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-56000","cwe":"CWE-416","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-56000","date":"2026-11-09","epss":0.00308,"percentile":0.23799}],"risk":0.154,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-56000"},"relatedVulnerabilities":[{"id":"CVE-2026-56000","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"meissner@suse.de","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56000","cwe":"CWE-416","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-56000","date":"2026-11-09","epss":0.00308,"percentile":0.23799}],"urls":["https://gitlab.freedesktop.org/xorg/xserver/-/commit/2779affbdb4354e894f490e56f962527d6125043","https://www.openwall.com/lists/oss-security/2026/07/08/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56000","description":"Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent() pointing into potentially reallocated memory."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-09","epss":0.00308,"percentile":0.23792}],"risk":0.154,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-09","epss":0.00308,"percentile":0.23792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-09","epss":0.00308,"percentile":0.23792}],"risk":0.154,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-09","epss":0.00308,"percentile":0.23792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66039","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-11-09","epss":0.00307,"percentile":0.23694}],"risk":0.1535,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66039"},"relatedVulnerabilities":[{"id":"CVE-2026-66039","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-11-09","epss":0.00307,"percentile":0.23694}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66039","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-11-09","epss":0.00307,"percentile":0.23694}],"risk":0.1535,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66039"},"relatedVulnerabilities":[{"id":"CVE-2026-66039","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-11-09","epss":0.00307,"percentile":0.23694}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66039","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66039","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-11-09","epss":0.00307,"percentile":0.23694}],"risk":0.1535,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66039"},"relatedVulnerabilities":[{"id":"CVE-2026-66039","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66039","cwe":"CWE-122","type":"Secondary","source":"disclosure@vulncheck.com"},{"cve":"CVE-2026-66039","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66039","date":"2026-11-09","epss":0.00307,"percentile":0.23694}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631","https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66039","description":"FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91410","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91410","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91410","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91410","date":"2026-11-09","epss":0.00306,"percentile":0.23604}],"risk":0.153,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91410"},"relatedVulnerabilities":[{"id":"CVE-2026-91410","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91410","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91410","date":"2026-11-09","epss":0.00306,"percentile":0.23604}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91410","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-09","epss":0.00306,"percentile":0.23604}],"risk":0.153,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-09","epss":0.00306,"percentile":0.23604}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91410","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91410","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91410","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91410","date":"2026-11-09","epss":0.00306,"percentile":0.23604}],"risk":0.153,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91410"},"relatedVulnerabilities":[{"id":"CVE-2026-91410","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91410","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91410","date":"2026-11-09","epss":0.00306,"percentile":0.23604}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91410","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-09","epss":0.00306,"percentile":0.23604}],"risk":0.153,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-09","epss":0.00306,"percentile":0.23604}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"1ce77119307aa4a5","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.43-2ubuntu2.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.43-2ubuntu2.4?arch=amd64&distro=ubuntu-26.04&upstream=glibc","type":"deb","version":"2.43-2ubuntu2.4","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GFDL-1.3","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84243","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"glibc","version":"2.43-2ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-84243","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-09","epss":0.00297,"percentile":0.22583}],"risk":0.1485,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84243"},"relatedVulnerabilities":[{"id":"CVE-2026-84243","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-09","epss":0.00297,"percentile":0.22583}],"urls":["https://inbox.sourceware.org/libc-alpha/20261012112453.47383-1-avinal.xlvii@gmail.com","https://sourceware.org/bugzilla/show_bug.cgi?id=17142","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0025"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.\n\nThe fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.\n\nLANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."}]},{"artifact":{"id":"c8481e5ece0d4908","cpes":["cpe:2.3:a:libc-gconv-modules-extra:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules-extra:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*"],"name":"libc-gconv-modules-extra","purl":"pkg:deb/ubuntu/libc-gconv-modules-extra@2.43-2ubuntu2.4?arch=amd64&distro=ubuntu-26.04&upstream=glibc","type":"deb","version":"2.43-2ubuntu2.4","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GFDL-1.3","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-gconv-modules-extra/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/libc-gconv-modules-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84243","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"glibc","version":"2.43-2ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-84243","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-09","epss":0.00297,"percentile":0.22583}],"risk":0.1485,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84243"},"relatedVulnerabilities":[{"id":"CVE-2026-84243","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-09","epss":0.00297,"percentile":0.22583}],"urls":["https://inbox.sourceware.org/libc-alpha/20261012112453.47383-1-avinal.xlvii@gmail.com","https://sourceware.org/bugzilla/show_bug.cgi?id=17142","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0025"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.\n\nThe fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.\n\nLANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."}]},{"artifact":{"id":"c513001c6e67b66e","cpes":["cpe:2.3:a:libc6:libc6:2.43-2ubuntu2.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.43-2ubuntu2.4?arch=amd64&distro=ubuntu-26.04&upstream=glibc","type":"deb","version":"2.43-2ubuntu2.4","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GFDL-1.3","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84243","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"glibc","version":"2.43-2ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-84243","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-09","epss":0.00297,"percentile":0.22583}],"risk":0.1485,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84243"},"relatedVulnerabilities":[{"id":"CVE-2026-84243","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-09","epss":0.00297,"percentile":0.22583}],"urls":["https://inbox.sourceware.org/libc-alpha/20261012112453.47383-1-avinal.xlvii@gmail.com","https://sourceware.org/bugzilla/show_bug.cgi?id=17142","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0025"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.\n\nThe fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.\n\nLANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."}]},{"artifact":{"id":"f506e7fc36c2a200","cpes":["cpe:2.3:a:locales:locales:2.43-2ubuntu2.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.43-2ubuntu2.4?arch=all&distro=ubuntu-26.04&upstream=glibc","type":"deb","version":"2.43-2ubuntu2.4","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GFDL-1.3","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.preinst","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.preinst"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84243","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"glibc","version":"2.43-2ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-84243","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-09","epss":0.00297,"percentile":0.22583}],"risk":0.1485,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84243"},"relatedVulnerabilities":[{"id":"CVE-2026-84243","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-09","epss":0.00297,"percentile":0.22583}],"urls":["https://inbox.sourceware.org/libc-alpha/20261012112453.47383-1-avinal.xlvii@gmail.com","https://sourceware.org/bugzilla/show_bug.cgi?id=17142","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0025"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.\n\nThe fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.\n\nLANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."}]},{"artifact":{"id":"6329b15306fe2f35","cpes":["cpe:2.3:a:golang:networking:v0.60.0:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.60.0:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.60.0","type":"go-module","version":"v0.60.0","language":"go","licenses":[],"metadata":{"h1Digest":"h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU=","mainModule":"github.com/rclone/rclone","architecture":"amd64","goCompiledVersion":"go1.27.2"},"locations":[{"path":"/usr/local/bin/rclone","layerID":"sha256:3ed598c74c07812030a840a2539a9482d9349f27ad19f7eaa640cf48328499d6","accessPath":"/usr/local/bin/rclone","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.62.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6866","versionConstraint":"<0.62.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.60.0"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6866","fix":{"state":"fixed","versions":["0.62.0"],"available":[{"date":"2026-10-27","kind":"release","version":"0.62.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97045","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97045","date":"2026-11-09","epss":0.00267,"percentile":0.18966}],"risk":0.14818499999999998,"urls":["https://go.dev/issue/82622","https://groups.google.com/g/golang-announce/c/sqrs2vTx_Xs"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/855121","description":"In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as <mglyph> or <malignmark> fostered under <mtext>), causing a parser to resolve the subtree in a different foreign namespace upon re-parsing the rendered output.\n\nContinue walking the full ancestor chain and verify that every transition from a non-empty namespace occurs at an HTML integration point before emitting literal text."},"relatedVulnerabilities":[{"id":"CVE-2026-97045","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97045","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97045","date":"2026-11-09","epss":0.00267,"percentile":0.18966}],"urls":["https://go.dev/cl/855121","https://go.dev/issue/82622","https://groups.google.com/g/golang-announce/c/sqrs2vTx_Xs","https://pkg.go.dev/vuln/GO-2026-6866"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97045","description":"In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as <mglyph> or <malignmark> fostered under <mtext>), causing a parser to resolve the subtree in a different foreign namespace upon re-parsing the rendered output. Continue walking the full ancestor chain and verify that every transition from a non-empty namespace occurs at an HTML integration point before emitting literal text."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-13858","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-13858","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-13858","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-13858","date":"2026-11-09","epss":0.00293,"percentile":0.22112}],"risk":0.1465,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-13858"},"relatedVulnerabilities":[{"id":"CVE-2026-13858","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13858","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-13858","date":"2026-11-09","epss":0.00293,"percentile":0.22112}],"urls":["https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html","https://issues.chromium.org/issues/507090179"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13858","description":"Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file. (Chromium security severity: Medium)"}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-13858","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-13858","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-13858","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-13858","date":"2026-11-09","epss":0.00293,"percentile":0.22112}],"risk":0.1465,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-13858"},"relatedVulnerabilities":[{"id":"CVE-2026-13858","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13858","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-13858","date":"2026-11-09","epss":0.00293,"percentile":0.22112}],"urls":["https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html","https://issues.chromium.org/issues/507090179"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13858","description":"Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file. (Chromium security severity: Medium)"}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-13858","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-13858","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-13858","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-13858","date":"2026-11-09","epss":0.00293,"percentile":0.22112}],"risk":0.1465,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-13858"},"relatedVulnerabilities":[{"id":"CVE-2026-13858","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13858","cwe":"CWE-125","type":"Secondary","source":"chrome-cve-admin@google.com"}],"epss":[{"cve":"CVE-2026-13858","date":"2026-11-09","epss":0.00293,"percentile":0.22112}],"urls":["https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html","https://issues.chromium.org/issues/507090179"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13858","description":"Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file. (Chromium security severity: Medium)"}]},{"artifact":{"id":"164b170cdee0b5fb","cpes":["cpe:2.3:a:libsndfile1:libsndfile1:1.2.2-4:*:*:*:*:*:*:*"],"name":"libsndfile1","purl":"pkg:deb/ubuntu/libsndfile1@1.2.2-4?arch=amd64&distro=ubuntu-26.04&upstream=libsndfile","type":"deb","version":"1.2.2-4","language":"","licenses":["Apache-2.0","BSD-2-clause","BSD-3-clause","FSFAP","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","NTP","gsm","sun"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsndfile1/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/libsndfile1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsndfile1:amd64.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/libsndfile1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsndfile"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-109828","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsndfile","version":"1.2.2-4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-109828","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-109828","cwe":"CWE-453","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-109828","cwe":"CWE-457","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-109828","date":"2026-11-09","epss":0.00293,"percentile":0.22111}],"risk":0.1465,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-109828"},"relatedVulnerabilities":[{"id":"CVE-2026-109828","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-109828","cwe":"CWE-453","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-109828","cwe":"CWE-457","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-109828","date":"2026-11-09","epss":0.00293,"percentile":0.22111}],"urls":["https://github.com/libsndfile/libsndfile/","https://github.com/libsndfile/libsndfile/issues/1169","https://vuldb.com/cve/CVE-2026-109828","https://vuldb.com/submit/1002209","https://vuldb.com/vuln/417466","https://vuldb.com/vuln/417466/cti"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-109828","description":"A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet."}]},{"artifact":{"id":"60af6de63c33b882","cpes":["cpe:2.3:a:python3-pip-whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*"],"name":"python3-pip-whl","purl":"pkg:deb/ubuntu/python3-pip-whl@25.1.1%2Bdfsg-1ubuntu2?arch=all&distro=ubuntu-26.04&upstream=python-pip","type":"deb","version":"25.1.1+dfsg-1ubuntu2","language":"","licenses":["Apache-2.0","BSD-2","BSD-3","Expat","ISC","MPL-2","MPL-2.0","Python"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-pip-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-pip-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.list"}],"upstreams":[{"name":"python-pip"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-13346","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python-pip","version":"25.1.1+dfsg-1ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-13346","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-13346","cwe":"CWE-36","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-13346","date":"2026-11-09","epss":0.00292,"percentile":0.21967}],"risk":0.146,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-13346"},"relatedVulnerabilities":[{"id":"CVE-2026-13346","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13346","cwe":"CWE-36","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-13346","date":"2026-11-09","epss":0.00292,"percentile":0.21967}],"urls":["https://github.com/pypa/pip/pull/14110","https://mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX/","http://www.openwall.com/lists/oss-security/2026/07/29/7"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13346","description":"pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.\n\n\n\n\nThis vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running `pip download` with the `--only-binary` option as installing source distributions from an untrusted index is already an unsafe operation that executes code during install time."}]},{"artifact":{"id":"60af6de63c33b882","cpes":["cpe:2.3:a:python3-pip-whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*"],"name":"python3-pip-whl","purl":"pkg:deb/ubuntu/python3-pip-whl@25.1.1%2Bdfsg-1ubuntu2?arch=all&distro=ubuntu-26.04&upstream=python-pip","type":"deb","version":"25.1.1+dfsg-1ubuntu2","language":"","licenses":["Apache-2.0","BSD-2","BSD-3","Expat","ISC","MPL-2","MPL-2.0","Python"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-pip-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-pip-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.list"}],"upstreams":[{"name":"python-pip"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-97688","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python-pip","version":"25.1.1+dfsg-1ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-97688","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-97688","cwe":"CWE-835","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-97688","date":"2026-11-09","epss":0.00292,"percentile":0.219}],"risk":0.146,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-97688"},"relatedVulnerabilities":[{"id":"CVE-2026-97688","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97688","cwe":"CWE-835","type":"Primary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-97688","date":"2026-11-09","epss":0.00292,"percentile":0.219}],"urls":["https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f","https://github.com/urllib3/urllib3/releases/tag/2.8.0","https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97688","description":"urllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.read_chunked can enter an infinite loop because the Deflate decoder retains trailing bytes as unconsumed input after reaching end-of-stream and repeatedly decodes them without progress. The issue occurs when an untrusted server sends a chunked Deflate response whose decoded body exceeds a positive finite chunk size and whose encoded body has trailing bytes, specifically a response with Transfer-Encoding: chunked and Content-Encoding: deflate, content decoding enabled, and the positive finite amt=N streaming chunk size. The attack mechanism is that a malicious server returns a compressed chunked response with trailing bytes after the Deflate stream. The impact is excessive CPU usage and a request that does not complete, and network read timeouts do not interrupt the loop because no further socket read occurs. This issue is fixed in version 2.8.0."}]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66338","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66338","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66338","cwe":"CWE-444","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-66338","date":"2026-11-09","epss":0.00291,"percentile":0.2182}],"risk":0.1455,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66338"},"relatedVulnerabilities":[{"id":"CVE-2026-66338","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":7.2,"impactScore":2.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66338","cwe":"CWE-444","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-66338","date":"2026-11-09","epss":0.00291,"percentile":0.2182}],"urls":["https://access.redhat.com/security/cve/CVE-2026-66338","https://bugzilla.redhat.com/show_bug.cgi?id=2506950"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66338","description":"A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that silently accepts inputs violating RFC 9112, including leading whitespace, plus sign prefixes, and trailing invalid characters. When libsoup operates behind a strict frontend proxy, this parsing differential can be exploited to smuggle HTTP requests."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66338","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-66338","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66338","cwe":"CWE-444","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-66338","date":"2026-11-09","epss":0.00291,"percentile":0.2182}],"risk":0.1455,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66338"},"relatedVulnerabilities":[{"id":"CVE-2026-66338","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":7.2,"impactScore":2.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66338","cwe":"CWE-444","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-66338","date":"2026-11-09","epss":0.00291,"percentile":0.2182}],"urls":["https://access.redhat.com/security/cve/CVE-2026-66338","https://bugzilla.redhat.com/show_bug.cgi?id=2506950"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66338","description":"A flaw was found in libsoup. The chunked transfer encoding parser uses a permissive parsing function for chunk sizes that silently accepts inputs violating RFC 9112, including leading whitespace, plus sign prefixes, and trailing invalid characters. When libsoup operates behind a strict frontend proxy, this parsing differential can be exploited to smuggle HTTP requests."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-09","epss":0.0029,"percentile":0.21666}],"risk":0.145,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-09","epss":0.0029,"percentile":0.21666}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-09","epss":0.0029,"percentile":0.21666}],"risk":0.145,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-09","epss":0.0029,"percentile":0.21666}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-09","epss":0.0029,"percentile":0.21666}],"risk":0.145,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-09","epss":0.0029,"percentile":0.21666}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-09","epss":0.0029,"percentile":0.21666}],"risk":0.145,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-09","epss":0.0029,"percentile":0.21666}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-09","epss":0.0029,"percentile":0.21666}],"risk":0.145,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-09","epss":0.0029,"percentile":0.21666}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-09","epss":0.0029,"percentile":0.21666}],"risk":0.145,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-09","epss":0.0029,"percentile":0.21666}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-09","epss":0.0029,"percentile":0.21665}],"risk":0.145,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-09","epss":0.0029,"percentile":0.21665}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-09","epss":0.0029,"percentile":0.21665}],"risk":0.145,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-09","epss":0.0029,"percentile":0.21665}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-09","epss":0.00289,"percentile":0.2166}],"risk":0.14450000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-09","epss":0.00289,"percentile":0.2166}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-09","epss":0.00289,"percentile":0.2166}],"risk":0.14450000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-09","epss":0.00289,"percentile":0.2166}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-09","epss":0.00289,"percentile":0.21581}],"risk":0.14450000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-09","epss":0.00289,"percentile":0.21581}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-09","epss":0.00289,"percentile":0.21581}],"risk":0.14450000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-09","epss":0.00289,"percentile":0.21581}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"ac5a91fde3287702","cpes":["cpe:2.3:a:libsoup-3.0-0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_0:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-0","purl":"pkg:deb/ubuntu/libsoup-3.0-0@3.6.6-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-0/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-9901","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-9901","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-9901","cwe":"CWE-524","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-9901","date":"2026-11-09","epss":0.00472,"percentile":0.41063}],"risk":0.1416,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-9901"},"relatedVulnerabilities":[{"id":"CVE-2025-9901","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9901","cwe":"CWE-524","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-9901","date":"2026-11-09","epss":0.00472,"percentile":0.41063}],"urls":["https://access.redhat.com/security/cve/CVE-2025-9901","https://bugzilla.redhat.com/show_bug.cgi?id=2392790","https://gitlab.gnome.org/GNOME/libsoup/-/issues/453"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9901","description":"A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be incorrectly reused across different requests, potentially exposing sensitive user information. While the issue is unlikely to affect everyday desktop use, it could result in confidentiality breaches in proxy or multi-user environments."}]},{"artifact":{"id":"1855f346d0283613","cpes":["cpe:2.3:a:libsoup-3.0-common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0-common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0_common:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup-3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup_3.0:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup-3.0-common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libsoup:libsoup_3.0_common:3.6.6-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libsoup-3.0-common","purl":"pkg:deb/ubuntu/libsoup-3.0-common@3.6.6-1ubuntu0.2?arch=all&distro=ubuntu-26.04&upstream=libsoup3","type":"deb","version":"3.6.6-1ubuntu0.2","language":"","licenses":["Expat","LGPL-2+","LGPL-2.1","LGPL-2.1+","MPL-2.0","RSA-Other"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsoup-3.0-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libsoup-3.0-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsoup-3.0-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libsoup-3.0-common.list"}],"upstreams":[{"name":"libsoup3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-9901","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libsoup3","version":"3.6.6-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-9901","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-9901","cwe":"CWE-524","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-9901","date":"2026-11-09","epss":0.00472,"percentile":0.41063}],"risk":0.1416,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-9901"},"relatedVulnerabilities":[{"id":"CVE-2025-9901","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9901","cwe":"CWE-524","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-9901","date":"2026-11-09","epss":0.00472,"percentile":0.41063}],"urls":["https://access.redhat.com/security/cve/CVE-2025-9901","https://bugzilla.redhat.com/show_bug.cgi?id=2392790","https://gitlab.gnome.org/GNOME/libsoup/-/issues/453"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9901","description":"A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be incorrectly reused across different requests, potentially exposing sensitive user information. While the issue is unlikely to affect everyday desktop use, it could result in confidentiality breaches in proxy or multi-user environments."}]},{"artifact":{"id":"1ce77119307aa4a5","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.43-2ubuntu2.4:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.43-2ubuntu2.4?arch=amd64&distro=ubuntu-26.04&upstream=glibc","type":"deb","version":"2.43-2ubuntu2.4","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GFDL-1.3","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-97399","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"glibc","version":"2.43-2ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-97399","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-97399","cwe":"CWE-126","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-97399","date":"2026-11-09","epss":0.00281,"percentile":0.20737}],"risk":0.1405,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-97399"},"relatedVulnerabilities":[{"id":"CVE-2026-97399","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97399","cwe":"CWE-126","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-97399","date":"2026-11-09","epss":0.00281,"percentile":0.20737}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34683","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0024","http://www.openwall.com/lists/oss-security/2026/09/28/7"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97399","description":"The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.\n\nThis condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable."}]},{"artifact":{"id":"c8481e5ece0d4908","cpes":["cpe:2.3:a:libc-gconv-modules-extra:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules-extra:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-gconv-modules-extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_gconv_modules_extra:2.43-2ubuntu2.4:*:*:*:*:*:*:*"],"name":"libc-gconv-modules-extra","purl":"pkg:deb/ubuntu/libc-gconv-modules-extra@2.43-2ubuntu2.4?arch=amd64&distro=ubuntu-26.04&upstream=glibc","type":"deb","version":"2.43-2ubuntu2.4","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GFDL-1.3","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-gconv-modules-extra/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/libc-gconv-modules-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-97399","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"glibc","version":"2.43-2ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-97399","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-97399","cwe":"CWE-126","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-97399","date":"2026-11-09","epss":0.00281,"percentile":0.20737}],"risk":0.1405,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-97399"},"relatedVulnerabilities":[{"id":"CVE-2026-97399","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97399","cwe":"CWE-126","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-97399","date":"2026-11-09","epss":0.00281,"percentile":0.20737}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34683","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0024","http://www.openwall.com/lists/oss-security/2026/09/28/7"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97399","description":"The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.\n\nThis condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable."}]},{"artifact":{"id":"c513001c6e67b66e","cpes":["cpe:2.3:a:libc6:libc6:2.43-2ubuntu2.4:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.43-2ubuntu2.4?arch=amd64&distro=ubuntu-26.04&upstream=glibc","type":"deb","version":"2.43-2ubuntu2.4","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GFDL-1.3","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-97399","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"glibc","version":"2.43-2ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-97399","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-97399","cwe":"CWE-126","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-97399","date":"2026-11-09","epss":0.00281,"percentile":0.20737}],"risk":0.1405,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-97399"},"relatedVulnerabilities":[{"id":"CVE-2026-97399","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97399","cwe":"CWE-126","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-97399","date":"2026-11-09","epss":0.00281,"percentile":0.20737}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34683","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0024","http://www.openwall.com/lists/oss-security/2026/09/28/7"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97399","description":"The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.\n\nThis condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable."}]},{"artifact":{"id":"f506e7fc36c2a200","cpes":["cpe:2.3:a:locales:locales:2.43-2ubuntu2.4:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.43-2ubuntu2.4?arch=all&distro=ubuntu-26.04&upstream=glibc","type":"deb","version":"2.43-2ubuntu2.4","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GFDL-1.3","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.preinst","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.preinst"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-97399","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"glibc","version":"2.43-2ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-97399","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-97399","cwe":"CWE-126","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-97399","date":"2026-11-09","epss":0.00281,"percentile":0.20737}],"risk":0.1405,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-97399"},"relatedVulnerabilities":[{"id":"CVE-2026-97399","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97399","cwe":"CWE-126","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-97399","date":"2026-11-09","epss":0.00281,"percentile":0.20737}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34683","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0024","http://www.openwall.com/lists/oss-security/2026/09/28/7"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97399","description":"The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable.\n\nThis condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-94114","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-94114","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-94114","cwe":"CWE-386","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-94114","date":"2026-11-09","epss":0.00279,"percentile":0.20523}],"risk":0.13949999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-94114"},"relatedVulnerabilities":[{"id":"CVE-2026-94114","cvss":[{"type":"Secondary","source":"security@apache.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"security@apache.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94114","cwe":"CWE-386","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-94114","date":"2026-11-09","epss":0.00279,"percentile":0.20523}],"urls":["https://github.com/apache/commons-bcel/commit/14890bf2b9014df25f9b4de86f29b5e917e5656b.patch","https://lists.apache.org/thread.html/co1wfk2lyrmpnfhn49o370pvfl978rw6","http://www.openwall.com/lists/oss-security/2026/10/07/12"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94114","description":"Symbolic name not mapping to correct class.\n\n\n\nBCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class.\n\n\n\nThis issue affects Apache Commons BCEL: before 6.13.0.\n\n\n\nUsers are recommended to upgrade to version 6.13.0, which fixes the issue."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-94114","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-94114","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-94114","cwe":"CWE-386","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-94114","date":"2026-11-09","epss":0.00279,"percentile":0.20523}],"risk":0.13949999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-94114"},"relatedVulnerabilities":[{"id":"CVE-2026-94114","cvss":[{"type":"Secondary","source":"security@apache.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"security@apache.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94114","cwe":"CWE-386","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-94114","date":"2026-11-09","epss":0.00279,"percentile":0.20523}],"urls":["https://github.com/apache/commons-bcel/commit/14890bf2b9014df25f9b4de86f29b5e917e5656b.patch","https://lists.apache.org/thread.html/co1wfk2lyrmpnfhn49o370pvfl978rw6","http://www.openwall.com/lists/oss-security/2026/10/07/12"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94114","description":"Symbolic name not mapping to correct class.\n\n\n\nBCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class.\n\n\n\nThis issue affects Apache Commons BCEL: before 6.13.0.\n\n\n\nUsers are recommended to upgrade to version 6.13.0, which fixes the issue."}]},{"artifact":{"id":"2fd4888592a00e74","cpes":["cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-0:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_0:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"libsqlite3-0","purl":"pkg:deb/ubuntu/libsqlite3-0@3.46.1-9ubuntu0.3?arch=amd64&distro=ubuntu-26.04&upstream=sqlite3","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-0/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libsqlite3-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119379","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119379","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119379","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119379","date":"2026-11-09","epss":0.00278,"percentile":0.20407}],"risk":0.13899999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119379"},"relatedVulnerabilities":[{"id":"CVE-2026-119379","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119379","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119379","date":"2026-11-09","epss":0.00278,"percentile":0.20407}],"urls":["https://abraxaslabs.tech/research/sqlite-session-ncol","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619","https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52","https://sqlite.org/bugs/info/2026-08-16T10:15:25Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/3f57024aecea0f3b","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119379","description":"SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-70907","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-70907","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-70907","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-70907","date":"2026-11-09","epss":0.00278,"percentile":0.20357}],"risk":0.13899999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-70907"},"relatedVulnerabilities":[{"id":"CVE-2026-70907","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70907","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-70907","date":"2026-11-09","epss":0.00278,"percentile":0.20357}],"urls":["https://www.oracle.com/security-alerts/cspuaug2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-08-18"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70907","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-70907","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-70907","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-70907","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-70907","date":"2026-11-09","epss":0.00278,"percentile":0.20357}],"risk":0.13899999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-70907"},"relatedVulnerabilities":[{"id":"CVE-2026-70907","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70907","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-70907","date":"2026-11-09","epss":0.00278,"percentile":0.20357}],"urls":["https://www.oracle.com/security-alerts/cspuaug2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-08-18"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70907","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83368","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83368","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83368","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83368","date":"2026-11-09","epss":0.00277,"percentile":0.20276}],"risk":0.13849999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83368"},"relatedVulnerabilities":[{"id":"CVE-2026-83368","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83368","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83368","date":"2026-11-09","epss":0.00277,"percentile":0.20276}],"urls":["https://www.oracle.com/security-alerts/cspusep2026.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83368","description":"Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE (component: Compiler).   The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM accessible data as well as  unauthorized update, insert or delete access to some of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83368","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-83368","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-83368","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83368","date":"2026-11-09","epss":0.00277,"percentile":0.20276}],"risk":0.13849999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-83368"},"relatedVulnerabilities":[{"id":"CVE-2026-83368","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83368","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83368","date":"2026-11-09","epss":0.00277,"percentile":0.20276}],"urls":["https://www.oracle.com/security-alerts/cspusep2026.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83368","description":"Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE (component: Compiler).   The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM accessible data as well as  unauthorized update, insert or delete access to some of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L)."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120210","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-120210","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-09","epss":0.00276,"percentile":0.20157}],"risk":0.13799999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-120210"},"relatedVulnerabilities":[{"id":"CVE-2026-120210","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-09","epss":0.00276,"percentile":0.20157}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25341","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/imfdec.c#L273","https://www.vulncheck.com/advisories/ffmpeg-5.0-through-9.0.2-path-traversal-via-imf-demuxer-assetmap-path"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120210","description":"FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence and size, or trigger server-side requests."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120210","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-120210","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-09","epss":0.00276,"percentile":0.20157}],"risk":0.13799999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-120210"},"relatedVulnerabilities":[{"id":"CVE-2026-120210","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-09","epss":0.00276,"percentile":0.20157}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25341","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/imfdec.c#L273","https://www.vulncheck.com/advisories/ffmpeg-5.0-through-9.0.2-path-traversal-via-imf-demuxer-assetmap-path"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120210","description":"FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence and size, or trigger server-side requests."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-120210","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-120210","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-09","epss":0.00276,"percentile":0.20157}],"risk":0.13799999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-120210"},"relatedVulnerabilities":[{"id":"CVE-2026-120210","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-120210","cwe":"CWE-22","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-120210","date":"2026-11-09","epss":0.00276,"percentile":0.20157}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25341","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n9.0.2/libavformat/imfdec.c#L273","https://www.vulncheck.com/advisories/ffmpeg-5.0-through-9.0.2-path-traversal-via-imf-demuxer-assetmap-path"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-120210","description":"FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence and size, or trigger server-side requests."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-09","epss":0.00274,"percentile":0.19878}],"risk":0.13699999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-09","epss":0.00274,"percentile":0.19878}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-09","epss":0.00274,"percentile":0.19878}],"risk":0.13699999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-09","epss":0.00274,"percentile":0.19878}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"834a9edacff5c7a2","cpes":["cpe:2.3:a:libxtst6:libxtst6:2\\:1.2.5-1ubuntu0.1:*:*:*:*:*:*:*"],"name":"libxtst6","purl":"pkg:deb/ubuntu/libxtst6@2%3A1.2.5-1ubuntu0.1?arch=amd64&distro=ubuntu-26.04&upstream=libxtst","type":"deb","version":"2:1.2.5-1ubuntu0.1","language":"","licenses":["sha256:304f78731e1e0e78132fbba4e1909c8642878a3b8c4837b36cb2d38891bf2204"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libxtst6/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/libxtst6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libxtst6:amd64.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/libxtst6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libxtst"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-109088","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libxtst","version":"2:1.2.5-1ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-109088","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-109088","cwe":"CWE-835","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-109088","date":"2026-11-09","epss":0.00272,"percentile":0.19709}],"risk":0.136,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-109088"},"relatedVulnerabilities":[{"id":"CVE-2026-109088","cvss":[{"type":"Secondary","source":"meissner@suse.de","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-109088","cwe":"CWE-835","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-109088","date":"2026-11-09","epss":0.00272,"percentile":0.19709}],"urls":["https://gitlab.freedesktop.org/xorg/lib/libxtst/-/merge_requests/11"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-109088","description":"A malicious X server could send malformed  RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a endless loop."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91411","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91411","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91411","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91411","date":"2026-11-09","epss":0.00267,"percentile":0.18896}],"risk":0.1335,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91411"},"relatedVulnerabilities":[{"id":"CVE-2026-91411","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91411","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91411","date":"2026-11-09","epss":0.00267,"percentile":0.18896}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91411","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition as well as  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91411","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91411","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91411","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91411","date":"2026-11-09","epss":0.00267,"percentile":0.18896}],"risk":0.1335,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91411"},"relatedVulnerabilities":[{"id":"CVE-2026-91411","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91411","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91411","date":"2026-11-09","epss":0.00267,"percentile":0.18896}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91411","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition as well as  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-101516","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-101516","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-101516","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-101516","date":"2026-11-09","epss":0.00267,"percentile":0.18887}],"risk":0.1335,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-101516"},"relatedVulnerabilities":[{"id":"CVE-2026-101516","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-101516","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-101516","date":"2026-11-09","epss":0.00267,"percentile":0.18887}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-101516","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-101516","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-101516","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-101516","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-101516","date":"2026-11-09","epss":0.00267,"percentile":0.18887}],"risk":0.1335,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-101516"},"relatedVulnerabilities":[{"id":"CVE-2026-101516","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-101516","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-101516","date":"2026-11-09","epss":0.00267,"percentile":0.18887}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-101516","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-60589","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-60589","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-60589","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-60589","date":"2026-11-09","epss":0.00265,"percentile":0.18518}],"risk":0.1325,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-60589"},"relatedVulnerabilities":[{"id":"CVE-2026-60589","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-60589","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-60589","date":"2026-11-09","epss":0.00265,"percentile":0.18518}],"urls":["https://www.oracle.com/security-alerts/cspuaug2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-08-18"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-60589","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-60589","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-60589","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-60589","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-60589","date":"2026-11-09","epss":0.00265,"percentile":0.18518}],"risk":0.1325,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-60589"},"relatedVulnerabilities":[{"id":"CVE-2026-60589","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-60589","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-60589","date":"2026-11-09","epss":0.00265,"percentile":0.18518}],"urls":["https://www.oracle.com/security-alerts/cspuaug2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-08-18"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-60589","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91333","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91333","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91333","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91333","date":"2026-11-09","epss":0.00265,"percentile":0.18478}],"risk":0.1325,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91333"},"relatedVulnerabilities":[{"id":"CVE-2026-91333","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91333","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91333","date":"2026-11-09","epss":0.00265,"percentile":0.18478}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91333","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91333","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91333","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91333","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91333","date":"2026-11-09","epss":0.00265,"percentile":0.18478}],"risk":0.1325,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91333"},"relatedVulnerabilities":[{"id":"CVE-2026-91333","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91333","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91333","date":"2026-11-09","epss":0.00265,"percentile":0.18478}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91333","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"825e401acfd213c2","cpes":["cpe:2.3:a:xserver-common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver-common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver_common:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver-common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*","cpe:2.3:a:xserver:xserver_common:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xserver-common","purl":"pkg:deb/ubuntu/xserver-common@2%3A21.1.22-1ubuntu1.3?arch=all&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xserver-common/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xserver-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xserver-common.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xserver-common.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-34001","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-34001","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-34001","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-34001","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-34001","date":"2026-11-09","epss":0.00264,"percentile":0.18403}],"risk":0.132,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34001"},"relatedVulnerabilities":[{"id":"CVE-2026-34001","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34001","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-34001","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-34001","date":"2026-11-09","epss":0.00264,"percentile":0.18403}],"urls":["https://access.redhat.com/errata/RHSA-2026:10739","https://access.redhat.com/errata/RHSA-2026:11352","https://access.redhat.com/errata/RHSA-2026:11369","https://access.redhat.com/errata/RHSA-2026:11388","https://access.redhat.com/errata/RHSA-2026:11656","https://access.redhat.com/errata/RHSA-2026:11692","https://access.redhat.com/errata/RHSA-2026:13414","https://access.redhat.com/errata/RHSA-2026:19125","https://access.redhat.com/errata/RHSA-2026:19342","https://access.redhat.com/errata/RHSA-2026:19343","https://access.redhat.com/errata/RHSA-2026:19344","https://access.redhat.com/errata/RHSA-2026:20547","https://access.redhat.com/errata/RHSA-2026:20555","https://access.redhat.com/errata/RHSA-2026:20557","https://access.redhat.com/errata/RHSA-2026:20558","https://access.redhat.com/errata/RHSA-2026:20560","https://access.redhat.com/errata/RHSA-2026:20561","https://access.redhat.com/errata/RHSA-2026:20562","https://access.redhat.com/errata/RHSA-2026:20563","https://access.redhat.com/errata/RHSA-2026:20575","https://access.redhat.com/errata/RHSA-2026:20576","https://access.redhat.com/errata/RHSA-2026:20590","https://access.redhat.com/errata/RHSA-2026:21699","https://access.redhat.com/errata/RHSA-2026:21712","https://access.redhat.com/errata/RHSA-2026:21715","https://access.redhat.com/errata/RHSA-2026:21716","https://access.redhat.com/errata/RHSA-2026:21718","https://access.redhat.com/errata/RHSA-2026:21741","https://access.redhat.com/errata/RHSA-2026:21742","https://access.redhat.com/errata/RHSA-2026:22424","https://access.redhat.com/errata/RHSA-2026:22456","https://access.redhat.com/errata/RHSA-2026:23254","https://access.redhat.com/errata/RHSA-2026:23255","https://access.redhat.com/errata/RHSA-2026:23496","https://access.redhat.com/errata/RHSA-2026:24341","https://access.redhat.com/security/cve/CVE-2026-34001","https://bugzilla.redhat.com/show_bug.cgi?id=2451109","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34001.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34001","description":"A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system."}]},{"artifact":{"id":"e55ab909ded790e2","cpes":["cpe:2.3:a:xvfb:xvfb:2\\:21.1.22-1ubuntu1.3:*:*:*:*:*:*:*"],"name":"xvfb","purl":"pkg:deb/ubuntu/xvfb@2%3A21.1.22-1ubuntu1.3?arch=amd64&distro=ubuntu-26.04&upstream=xorg-server","type":"deb","version":"2:21.1.22-1ubuntu1.3","language":"","licenses":["sha256:4cc0447a22635c7b2f1a93fec4aa94f1970fadeb72a063de006b51cf4963a06f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/xvfb/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/xvfb/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/xvfb.list","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/xvfb.list"}],"upstreams":[{"name":"xorg-server"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-34001","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"xorg-server","version":"2:21.1.22-1ubuntu1.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-34001","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-34001","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-34001","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-34001","date":"2026-11-09","epss":0.00264,"percentile":0.18403}],"risk":0.132,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34001"},"relatedVulnerabilities":[{"id":"CVE-2026-34001","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34001","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-34001","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-34001","date":"2026-11-09","epss":0.00264,"percentile":0.18403}],"urls":["https://access.redhat.com/errata/RHSA-2026:10739","https://access.redhat.com/errata/RHSA-2026:11352","https://access.redhat.com/errata/RHSA-2026:11369","https://access.redhat.com/errata/RHSA-2026:11388","https://access.redhat.com/errata/RHSA-2026:11656","https://access.redhat.com/errata/RHSA-2026:11692","https://access.redhat.com/errata/RHSA-2026:13414","https://access.redhat.com/errata/RHSA-2026:19125","https://access.redhat.com/errata/RHSA-2026:19342","https://access.redhat.com/errata/RHSA-2026:19343","https://access.redhat.com/errata/RHSA-2026:19344","https://access.redhat.com/errata/RHSA-2026:20547","https://access.redhat.com/errata/RHSA-2026:20555","https://access.redhat.com/errata/RHSA-2026:20557","https://access.redhat.com/errata/RHSA-2026:20558","https://access.redhat.com/errata/RHSA-2026:20560","https://access.redhat.com/errata/RHSA-2026:20561","https://access.redhat.com/errata/RHSA-2026:20562","https://access.redhat.com/errata/RHSA-2026:20563","https://access.redhat.com/errata/RHSA-2026:20575","https://access.redhat.com/errata/RHSA-2026:20576","https://access.redhat.com/errata/RHSA-2026:20590","https://access.redhat.com/errata/RHSA-2026:21699","https://access.redhat.com/errata/RHSA-2026:21712","https://access.redhat.com/errata/RHSA-2026:21715","https://access.redhat.com/errata/RHSA-2026:21716","https://access.redhat.com/errata/RHSA-2026:21718","https://access.redhat.com/errata/RHSA-2026:21741","https://access.redhat.com/errata/RHSA-2026:21742","https://access.redhat.com/errata/RHSA-2026:22424","https://access.redhat.com/errata/RHSA-2026:22456","https://access.redhat.com/errata/RHSA-2026:23254","https://access.redhat.com/errata/RHSA-2026:23255","https://access.redhat.com/errata/RHSA-2026:23496","https://access.redhat.com/errata/RHSA-2026:24341","https://access.redhat.com/security/cve/CVE-2026-34001","https://bugzilla.redhat.com/show_bug.cgi?id=2451109","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34001.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34001","description":"A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system."}]},{"artifact":{"id":"bdef65422b6366b2","cpes":["cpe:2.3:a:libxrender1:libxrender1:1\\:0.9.12-1build1:*:*:*:*:*:*:*"],"name":"libxrender1","purl":"pkg:deb/ubuntu/libxrender1@1%3A0.9.12-1build1?arch=amd64&distro=ubuntu-26.04&upstream=libxrender","type":"deb","version":"1:0.9.12-1build1","language":"","licenses":["HPND-sell-variant"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libxrender1/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/libxrender1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libxrender1:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/libxrender1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libxrender"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-88807","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libxrender","version":"1:0.9.12-1build1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-88807","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-88807","cwe":"CWE-122","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-88807","date":"2026-11-09","epss":0.00263,"percentile":0.18224}],"risk":0.1315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-88807"},"relatedVulnerabilities":[{"id":"CVE-2026-88807","cvss":[{"type":"Secondary","source":"meissner@suse.de","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-88807","cwe":"CWE-122","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-88807","date":"2026-11-09","epss":0.00263,"percentile":0.18224}],"urls":["https://gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-88807","description":"A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87294","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87294","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87294","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87294","date":"2026-11-09","epss":0.00262,"percentile":0.18119}],"risk":0.131,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87294"},"relatedVulnerabilities":[{"id":"CVE-2026-87294","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87294","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87294","date":"2026-11-09","epss":0.00262,"percentile":0.18119}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87294","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87294","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-87294","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-87294","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87294","date":"2026-11-09","epss":0.00262,"percentile":0.18119}],"risk":0.131,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-87294"},"relatedVulnerabilities":[{"id":"CVE-2026-87294","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87294","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87294","date":"2026-11-09","epss":0.00262,"percentile":0.18119}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87294","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"311e12170887345d","cpes":["cpe:2.3:a:libxi6:libxi6:2\\:1.8.2-2:*:*:*:*:*:*:*"],"name":"libxi6","purl":"pkg:deb/ubuntu/libxi6@2%3A1.8.2-2?arch=amd64&distro=ubuntu-26.04&upstream=libxi","type":"deb","version":"2:1.8.2-2","language":"","licenses":["sha256:c812f9c54513ae593aab9580b54a4b18219648df7068d49ca1daa47f522ba3fa"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libxi6/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/libxi6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libxi6:amd64.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/libxi6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libxi"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-93541","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libxi","version":"2:1.8.2-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-93541","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-93541","cwe":"CWE-125","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-93541","date":"2026-11-09","epss":0.00262,"percentile":0.18103}],"risk":0.131,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-93541"},"relatedVulnerabilities":[{"id":"CVE-2026-93541","cvss":[{"type":"Secondary","source":"meissner@suse.de","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93541","cwe":"CWE-125","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-93541","date":"2026-11-09","epss":0.00262,"percentile":0.18103}],"urls":["https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=7b6fffd13fd3914e0b39f3a4f131913da7f066e7"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93541","description":"An out-of-bounds read in libXi's XQueryDeviceState() in libXi before 1.8.4 could be used by a"}]},{"artifact":{"id":"311e12170887345d","cpes":["cpe:2.3:a:libxi6:libxi6:2\\:1.8.2-2:*:*:*:*:*:*:*"],"name":"libxi6","purl":"pkg:deb/ubuntu/libxi6@2%3A1.8.2-2?arch=amd64&distro=ubuntu-26.04&upstream=libxi","type":"deb","version":"2:1.8.2-2","language":"","licenses":["sha256:c812f9c54513ae593aab9580b54a4b18219648df7068d49ca1daa47f522ba3fa"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libxi6/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/libxi6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libxi6:amd64.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/libxi6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libxi"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-93542","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libxi","version":"2:1.8.2-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-93542","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-93542","cwe":"CWE-125","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-93542","date":"2026-11-09","epss":0.00262,"percentile":0.18103}],"risk":0.131,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-93542"},"relatedVulnerabilities":[{"id":"CVE-2026-93542","cvss":[{"type":"Secondary","source":"meissner@suse.de","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93542","cwe":"CWE-125","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-93542","date":"2026-11-09","epss":0.00262,"percentile":0.18103}],"urls":["https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=f499944ad595b9bd7e7571c810842244caf150aa"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93542","description":"An out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() in libXi before 1.8.4 could be used by malicous servers to crash the X client."}]},{"artifact":{"id":"311e12170887345d","cpes":["cpe:2.3:a:libxi6:libxi6:2\\:1.8.2-2:*:*:*:*:*:*:*"],"name":"libxi6","purl":"pkg:deb/ubuntu/libxi6@2%3A1.8.2-2?arch=amd64&distro=ubuntu-26.04&upstream=libxi","type":"deb","version":"2:1.8.2-2","language":"","licenses":["sha256:c812f9c54513ae593aab9580b54a4b18219648df7068d49ca1daa47f522ba3fa"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libxi6/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/libxi6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libxi6:amd64.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/libxi6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libxi"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-93543","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libxi","version":"2:1.8.2-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-93543","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-93543","cwe":"CWE-125","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-93543","date":"2026-11-09","epss":0.00262,"percentile":0.18103}],"risk":0.131,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-93543"},"relatedVulnerabilities":[{"id":"CVE-2026-93543","cvss":[{"type":"Secondary","source":"meissner@suse.de","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","metrics":{"baseScore":7.4,"impactScore":4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93543","cwe":"CWE-125","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-93543","date":"2026-11-09","epss":0.00262,"percentile":0.18103}],"urls":["https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=e2089ab748828273f916bbffd4e65b506aa50fdc"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93543","description":"An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client."}]},{"artifact":{"id":"311e12170887345d","cpes":["cpe:2.3:a:libxi6:libxi6:2\\:1.8.2-2:*:*:*:*:*:*:*"],"name":"libxi6","purl":"pkg:deb/ubuntu/libxi6@2%3A1.8.2-2?arch=amd64&distro=ubuntu-26.04&upstream=libxi","type":"deb","version":"2:1.8.2-2","language":"","licenses":["sha256:c812f9c54513ae593aab9580b54a4b18219648df7068d49ca1daa47f522ba3fa"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libxi6/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/libxi6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libxi6:amd64.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/libxi6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libxi"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-93544","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libxi","version":"2:1.8.2-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-93544","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-93544","cwe":"CWE-125","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-93544","date":"2026-11-09","epss":0.00262,"percentile":0.18103}],"risk":0.131,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-93544"},"relatedVulnerabilities":[{"id":"CVE-2026-93544","cvss":[{"type":"Secondary","source":"meissner@suse.de","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93544","cwe":"CWE-125","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-93544","date":"2026-11-09","epss":0.00262,"percentile":0.18103}],"urls":["https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=a88a341135b79f6ed450f481e4a5d6ba502382af"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93544","description":"An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client."}]},{"artifact":{"id":"cd714f2b10ca1a58","cpes":["cpe:2.3:a:perl-base:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.40.1-7ubuntu0.3:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.40.1-7ubuntu0.3?arch=amd64&distro=ubuntu-26.04&upstream=perl","type":"deb","version":"5.40.1-7ubuntu0.3","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","FSFAP","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","LGPL-2.1","REGCOMP","REGCOMP,","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/perl-base.list"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-48961","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"perl","version":"5.40.1-7ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-48961","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-48961","cwe":"CWE-755","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48961","date":"2026-11-09","epss":0.00262,"percentile":0.18059}],"risk":0.131,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-48961"},"relatedVulnerabilities":[{"id":"CVE-2026-48961","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48961","cwe":"CWE-755","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48961","date":"2026-11-09","epss":0.00262,"percentile":0.18059}],"urls":["https://github.com/pmqs/IO-Compress/commit/33c89d03d6e746ed2ead4f2f6570d47864c61bc7.patch","https://metacpan.org/release/PMQS/IO-Compress-2.220/changes","http://www.openwall.com/lists/oss-security/2026/05/27/3"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48961","description":"IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID.\n\nWhen decode_ux() in bin/zipdetails handles an Info-ZIP Unix Extra Field (tag 0x7875) with UID Size or GID Size set to 8, causing zipdetails to decode an 8-byte UID or GID value, it dispatches through decodeLitteEndian(), which calls a misnamed helper unpackValueQ. The actual function defined in the same file is unpackValue_Q (with underscore); the call raises 'Undefined subroutine &main::unpackValueQ' and the script exits with status 255.\n\nLibrary callers of IO::Compress and IO::Uncompress are not affected; the defect is in the bundled CLI tool."}]},{"artifact":{"id":"60af6de63c33b882","cpes":["cpe:2.3:a:python3-pip-whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_whl:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_whl:25.1.1\\+dfsg-1ubuntu2:*:*:*:*:*:*:*"],"name":"python3-pip-whl","purl":"pkg:deb/ubuntu/python3-pip-whl@25.1.1%2Bdfsg-1ubuntu2?arch=all&distro=ubuntu-26.04&upstream=python-pip","type":"deb","version":"25.1.1+dfsg-1ubuntu2","language":"","licenses":["Apache-2.0","BSD-2","BSD-3","Expat","ISC","MPL-2","MPL-2.0","Python"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3-pip-whl/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3-pip-whl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3-pip-whl.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3-pip-whl.list"}],"upstreams":[{"name":"python-pip"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-1703","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python-pip","version":"25.1.1+dfsg-1ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-1703","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-1703","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-1703","date":"2026-11-09","epss":0.00436,"percentile":0.38214}],"risk":0.1308,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-1703"},"relatedVulnerabilities":[{"id":"CVE-2026-1703","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1703","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-1703","date":"2026-11-09","epss":0.00436,"percentile":0.38214}],"urls":["https://github.com/pypa/pip/commit/8e227a9be4faa9594e05d02ca05a413a2a4e7735","https://github.com/pypa/pip/pull/13777","https://mail.python.org/archives/list/security-announce@python.org/thread/WIEA34D4TABF2UNQJAOMXKCICSPBE2DJ/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-1703","description":"When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn't able to inject or overwrite executable files in typical situations."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75146","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-75146","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-75146","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75146","date":"2026-11-09","epss":0.00261,"percentile":0.18028}],"risk":0.1305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-75146"},"relatedVulnerabilities":[{"id":"CVE-2026-75146","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75146","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75146","date":"2026-11-09","epss":0.00261,"percentile":0.18028}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75146","description":"FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75146","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-75146","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-75146","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75146","date":"2026-11-09","epss":0.00261,"percentile":0.18028}],"risk":0.1305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-75146"},"relatedVulnerabilities":[{"id":"CVE-2026-75146","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75146","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75146","date":"2026-11-09","epss":0.00261,"percentile":0.18028}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75146","description":"FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75146","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-75146","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-75146","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75146","date":"2026-11-09","epss":0.00261,"percentile":0.18028}],"risk":0.1305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-75146"},"relatedVulnerabilities":[{"id":"CVE-2026-75146","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75146","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75146","date":"2026-11-09","epss":0.00261,"percentile":0.18028}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0","https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093","https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75146","description":"FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114583","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-114583","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-114583","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114583","date":"2026-11-09","epss":0.00261,"percentile":0.18017}],"risk":0.1305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-114583"},"relatedVulnerabilities":[{"id":"CVE-2026-114583","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114583","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114583","date":"2026-11-09","epss":0.00261,"percentile":0.18017}],"urls":["https://github.com/python/cpython/commit/04d8fca7da2cf3ebc0881fec8a53a1330c3b665d","https://github.com/python/cpython/commit/0901ad4ffb22605f12b705d1c1197f0a01f0ba0b","https://github.com/python/cpython/commit/bc93f8ad4c4a0f92d184ec8fccc8ff8a651dcec2","https://github.com/python/cpython/commit/c6ada40177436e4e2533a7b252082b5f0c043477","https://github.com/python/cpython/commit/e7e0b3523ad6ba8472873dda594cf4021a16f8b5","https://github.com/python/cpython/commit/f4401da82e2baec5dab06cf070fbca77d53220f0","https://github.com/python/cpython/issues/160097","https://github.com/python/cpython/pull/160098","https://mail.python.org/archives/list/security-announce@python.org/thread/43JOWPRAV5DI3VZ4FUEUAZOHCATXXOCK/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114583","description":"tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter=\"tar\" to write files outside the destination directory, subject to the permissions of the extracting process.\n\nThis is the tarfile.tar_filter counterpart of CVE-2026-7774, which covered tarfile.data_filter."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114583","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-114583","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-114583","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114583","date":"2026-11-09","epss":0.00261,"percentile":0.18017}],"risk":0.1305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-114583"},"relatedVulnerabilities":[{"id":"CVE-2026-114583","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114583","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114583","date":"2026-11-09","epss":0.00261,"percentile":0.18017}],"urls":["https://github.com/python/cpython/commit/04d8fca7da2cf3ebc0881fec8a53a1330c3b665d","https://github.com/python/cpython/commit/0901ad4ffb22605f12b705d1c1197f0a01f0ba0b","https://github.com/python/cpython/commit/bc93f8ad4c4a0f92d184ec8fccc8ff8a651dcec2","https://github.com/python/cpython/commit/c6ada40177436e4e2533a7b252082b5f0c043477","https://github.com/python/cpython/commit/e7e0b3523ad6ba8472873dda594cf4021a16f8b5","https://github.com/python/cpython/commit/f4401da82e2baec5dab06cf070fbca77d53220f0","https://github.com/python/cpython/issues/160097","https://github.com/python/cpython/pull/160098","https://mail.python.org/archives/list/security-announce@python.org/thread/43JOWPRAV5DI3VZ4FUEUAZOHCATXXOCK/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114583","description":"tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter=\"tar\" to write files outside the destination directory, subject to the permissions of the extracting process.\n\nThis is the tarfile.tar_filter counterpart of CVE-2026-7774, which covered tarfile.data_filter."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-114583","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-114583","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-114583","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114583","date":"2026-11-09","epss":0.00261,"percentile":0.18017}],"risk":0.1305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-114583"},"relatedVulnerabilities":[{"id":"CVE-2026-114583","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114583","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114583","date":"2026-11-09","epss":0.00261,"percentile":0.18017}],"urls":["https://github.com/python/cpython/commit/04d8fca7da2cf3ebc0881fec8a53a1330c3b665d","https://github.com/python/cpython/commit/0901ad4ffb22605f12b705d1c1197f0a01f0ba0b","https://github.com/python/cpython/commit/bc93f8ad4c4a0f92d184ec8fccc8ff8a651dcec2","https://github.com/python/cpython/commit/c6ada40177436e4e2533a7b252082b5f0c043477","https://github.com/python/cpython/commit/e7e0b3523ad6ba8472873dda594cf4021a16f8b5","https://github.com/python/cpython/commit/f4401da82e2baec5dab06cf070fbca77d53220f0","https://github.com/python/cpython/issues/160097","https://github.com/python/cpython/pull/160098","https://mail.python.org/archives/list/security-announce@python.org/thread/43JOWPRAV5DI3VZ4FUEUAZOHCATXXOCK/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114583","description":"tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter=\"tar\" to write files outside the destination directory, subject to the permissions of the extracting process.\n\nThis is the tarfile.tar_filter counterpart of CVE-2026-7774, which covered tarfile.data_filter."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114583","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-114583","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-114583","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114583","date":"2026-11-09","epss":0.00261,"percentile":0.18017}],"risk":0.1305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-114583"},"relatedVulnerabilities":[{"id":"CVE-2026-114583","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114583","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114583","date":"2026-11-09","epss":0.00261,"percentile":0.18017}],"urls":["https://github.com/python/cpython/commit/04d8fca7da2cf3ebc0881fec8a53a1330c3b665d","https://github.com/python/cpython/commit/0901ad4ffb22605f12b705d1c1197f0a01f0ba0b","https://github.com/python/cpython/commit/bc93f8ad4c4a0f92d184ec8fccc8ff8a651dcec2","https://github.com/python/cpython/commit/c6ada40177436e4e2533a7b252082b5f0c043477","https://github.com/python/cpython/commit/e7e0b3523ad6ba8472873dda594cf4021a16f8b5","https://github.com/python/cpython/commit/f4401da82e2baec5dab06cf070fbca77d53220f0","https://github.com/python/cpython/issues/160097","https://github.com/python/cpython/pull/160098","https://mail.python.org/archives/list/security-announce@python.org/thread/43JOWPRAV5DI3VZ4FUEUAZOHCATXXOCK/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114583","description":"tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter=\"tar\" to write files outside the destination directory, subject to the permissions of the extracting process.\n\nThis is the tarfile.tar_filter counterpart of CVE-2026-7774, which covered tarfile.data_filter."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114583","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-114583","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-114583","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114583","date":"2026-11-09","epss":0.00261,"percentile":0.18017}],"risk":0.1305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-114583"},"relatedVulnerabilities":[{"id":"CVE-2026-114583","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114583","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114583","date":"2026-11-09","epss":0.00261,"percentile":0.18017}],"urls":["https://github.com/python/cpython/commit/04d8fca7da2cf3ebc0881fec8a53a1330c3b665d","https://github.com/python/cpython/commit/0901ad4ffb22605f12b705d1c1197f0a01f0ba0b","https://github.com/python/cpython/commit/bc93f8ad4c4a0f92d184ec8fccc8ff8a651dcec2","https://github.com/python/cpython/commit/c6ada40177436e4e2533a7b252082b5f0c043477","https://github.com/python/cpython/commit/e7e0b3523ad6ba8472873dda594cf4021a16f8b5","https://github.com/python/cpython/commit/f4401da82e2baec5dab06cf070fbca77d53220f0","https://github.com/python/cpython/issues/160097","https://github.com/python/cpython/pull/160098","https://mail.python.org/archives/list/security-announce@python.org/thread/43JOWPRAV5DI3VZ4FUEUAZOHCATXXOCK/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114583","description":"tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter=\"tar\" to write files outside the destination directory, subject to the permissions of the extracting process.\n\nThis is the tarfile.tar_filter counterpart of CVE-2026-7774, which covered tarfile.data_filter."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116566","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-116566","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-09","epss":0.00259,"percentile":0.17725}],"risk":0.1295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-116566"},"relatedVulnerabilities":[{"id":"CVE-2026-116566","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-09","epss":0.00259,"percentile":0.17725}],"urls":["https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","https://github.com/python/cpython/issues/160898","https://github.com/python/cpython/pull/160899","https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/","http://www.openwall.com/lists/oss-security/2026/10/29/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116566","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-116566","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-09","epss":0.00259,"percentile":0.17725}],"risk":0.1295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-116566"},"relatedVulnerabilities":[{"id":"CVE-2026-116566","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-09","epss":0.00259,"percentile":0.17725}],"urls":["https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","https://github.com/python/cpython/issues/160898","https://github.com/python/cpython/pull/160899","https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/","http://www.openwall.com/lists/oss-security/2026/10/29/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-116566","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-116566","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-09","epss":0.00259,"percentile":0.17725}],"risk":0.1295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-116566"},"relatedVulnerabilities":[{"id":"CVE-2026-116566","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-09","epss":0.00259,"percentile":0.17725}],"urls":["https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","https://github.com/python/cpython/issues/160898","https://github.com/python/cpython/pull/160899","https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/","http://www.openwall.com/lists/oss-security/2026/10/29/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116566","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-116566","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-09","epss":0.00259,"percentile":0.17725}],"risk":0.1295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-116566"},"relatedVulnerabilities":[{"id":"CVE-2026-116566","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-09","epss":0.00259,"percentile":0.17725}],"urls":["https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","https://github.com/python/cpython/issues/160898","https://github.com/python/cpython/pull/160899","https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/","http://www.openwall.com/lists/oss-security/2026/10/29/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116566","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-116566","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-09","epss":0.00259,"percentile":0.17725}],"risk":0.1295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-116566"},"relatedVulnerabilities":[{"id":"CVE-2026-116566","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-09","epss":0.00259,"percentile":0.17725}],"urls":["https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","https://github.com/python/cpython/issues/160898","https://github.com/python/cpython/pull/160899","https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/","http://www.openwall.com/lists/oss-security/2026/10/29/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."}]},{"artifact":{"id":"311e12170887345d","cpes":["cpe:2.3:a:libxi6:libxi6:2\\:1.8.2-2:*:*:*:*:*:*:*"],"name":"libxi6","purl":"pkg:deb/ubuntu/libxi6@2%3A1.8.2-2?arch=amd64&distro=ubuntu-26.04&upstream=libxi","type":"deb","version":"2:1.8.2-2","language":"","licenses":["sha256:c812f9c54513ae593aab9580b54a4b18219648df7068d49ca1daa47f522ba3fa"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libxi6/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/libxi6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libxi6:amd64.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/libxi6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libxi"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-109089","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libxi","version":"2:1.8.2-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-109089","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-109089","cwe":"CWE-122","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-109089","date":"2026-11-09","epss":0.00258,"percentile":0.17574}],"risk":0.129,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-109089"},"relatedVulnerabilities":[{"id":"CVE-2026-109089","cvss":[{"type":"Secondary","source":"meissner@suse.de","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-109089","cwe":"CWE-122","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-109089","date":"2026-11-09","epss":0.00258,"percentile":0.17574}],"urls":["https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/f7836d0a0"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-109089","description":"A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server."}]},{"artifact":{"id":"311e12170887345d","cpes":["cpe:2.3:a:libxi6:libxi6:2\\:1.8.2-2:*:*:*:*:*:*:*"],"name":"libxi6","purl":"pkg:deb/ubuntu/libxi6@2%3A1.8.2-2?arch=amd64&distro=ubuntu-26.04&upstream=libxi","type":"deb","version":"2:1.8.2-2","language":"","licenses":["sha256:c812f9c54513ae593aab9580b54a4b18219648df7068d49ca1daa47f522ba3fa"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libxi6/copyright","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/usr/share/doc/libxi6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libxi6:amd64.md5sums","layerID":"sha256:929519d8099199378bde0d1816c41b7d73b9d0bf26ff61d9b44104a7572cea8c","accessPath":"/var/lib/dpkg/info/libxi6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libxi"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-109090","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libxi","version":"2:1.8.2-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-109090","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-109090","cwe":"CWE-122","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-109090","date":"2026-11-09","epss":0.00258,"percentile":0.17574}],"risk":0.129,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-109090"},"relatedVulnerabilities":[{"id":"CVE-2026-109090","cvss":[{"type":"Secondary","source":"meissner@suse.de","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-109090","cwe":"CWE-122","type":"Secondary","source":"meissner@suse.de"}],"epss":[{"cve":"CVE-2026-109090","date":"2026-11-09","epss":0.00258,"percentile":0.17574}],"urls":["https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/4eb9f70b6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-109090","description":"A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4."}]},{"artifact":{"id":"3b7653a8c37a0bcc","cpes":["cpe:2.3:a:libavcodec62:libavcodec62:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavcodec62","purl":"pkg:deb/ubuntu/libavcodec62@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavcodec62/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavcodec62/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavcodec62:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107698","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107698","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107698","cwe":"CWE-918","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107698","date":"2026-11-09","epss":0.00258,"percentile":0.17564}],"risk":0.129,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107698"},"relatedVulnerabilities":[{"id":"CVE-2026-107698","cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107698","cwe":"CWE-918","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107698","date":"2026-11-09","epss":0.00258,"percentile":0.17564}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22292","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n7.1.3/libavformat/rtsp.c#L2016","https://github.com/FFmpeg/FFmpeg/commit/2326bc5f69c9","https://github.com/FFmpeg/FFmpeg/commit/7c011995e394","https://github.com/FFmpeg/FFmpeg/commit/ea9e85e54981b8402368d0f21648836d6738f1b1","https://github.com/FFmpeg/FFmpeg/commit/f9aa8729bce1","https://www.vulncheck.com/advisories/ffmpeg-before-7.1.4-and-8.0.2-ssrf-via-rtsp-redirect-handling"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107698","description":"FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to internal hosts and ports under other schemes, bypassing -protocol_whitelist, to probe internal network services."}]},{"artifact":{"id":"7cc516987747a5fa","cpes":["cpe:2.3:a:libavutil60:libavutil60:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libavutil60","purl":"pkg:deb/ubuntu/libavutil60@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libavutil60/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libavutil60/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libavutil60:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107698","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107698","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107698","cwe":"CWE-918","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107698","date":"2026-11-09","epss":0.00258,"percentile":0.17564}],"risk":0.129,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107698"},"relatedVulnerabilities":[{"id":"CVE-2026-107698","cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107698","cwe":"CWE-918","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107698","date":"2026-11-09","epss":0.00258,"percentile":0.17564}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22292","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n7.1.3/libavformat/rtsp.c#L2016","https://github.com/FFmpeg/FFmpeg/commit/2326bc5f69c9","https://github.com/FFmpeg/FFmpeg/commit/7c011995e394","https://github.com/FFmpeg/FFmpeg/commit/ea9e85e54981b8402368d0f21648836d6738f1b1","https://github.com/FFmpeg/FFmpeg/commit/f9aa8729bce1","https://www.vulncheck.com/advisories/ffmpeg-before-7.1.4-and-8.0.2-ssrf-via-rtsp-redirect-handling"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107698","description":"FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to internal hosts and ports under other schemes, bypassing -protocol_whitelist, to probe internal network services."}]},{"artifact":{"id":"9cc29b8b9c87e578","cpes":["cpe:2.3:a:libswresample6:libswresample6:7\\:8.0.1-3ubuntu2:*:*:*:*:*:*:*"],"name":"libswresample6","purl":"pkg:deb/ubuntu/libswresample6@7%3A8.0.1-3ubuntu2?arch=amd64&distro=ubuntu-26.04&upstream=ffmpeg","type":"deb","version":"7:8.0.1-3ubuntu2","language":"","licenses":["BSD-1-clause","BSD-2-clause","BSD-3-clause","BSL","Expat","GPL-2","GPL-2+","GPL-3","GPL-3+","IJG","ISC","LGPL-2+","LGPL-2.1","LGPL-2.1+","Sundry","Zlib","man-page","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libswresample6/copyright","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/usr/share/doc/libswresample6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","layerID":"sha256:204c2e92fe70ef81e53541a6cb491c8b12d6609413589ede545c0378f6c8a12e","accessPath":"/var/lib/dpkg/info/libswresample6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ffmpeg"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107698","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"ffmpeg","version":"7:8.0.1-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107698","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107698","cwe":"CWE-918","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107698","date":"2026-11-09","epss":0.00258,"percentile":0.17564}],"risk":0.129,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107698"},"relatedVulnerabilities":[{"id":"CVE-2026-107698","cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107698","cwe":"CWE-918","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107698","date":"2026-11-09","epss":0.00258,"percentile":0.17564}],"urls":["https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22292","https://github.com/FFmpeg/FFmpeg","https://github.com/FFmpeg/FFmpeg/blob/n7.1.3/libavformat/rtsp.c#L2016","https://github.com/FFmpeg/FFmpeg/commit/2326bc5f69c9","https://github.com/FFmpeg/FFmpeg/commit/7c011995e394","https://github.com/FFmpeg/FFmpeg/commit/ea9e85e54981b8402368d0f21648836d6738f1b1","https://github.com/FFmpeg/FFmpeg/commit/f9aa8729bce1","https://www.vulncheck.com/advisories/ffmpeg-before-7.1.4-and-8.0.2-ssrf-via-rtsp-redirect-handling"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107698","description":"FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to internal hosts and ports under other schemes, bypassing -protocol_whitelist, to probe internal network services."}]},{"artifact":{"id":"c756a9d223a4db8e","cpes":["cpe:2.3:a:openjdk-21-jdk-headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk-headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk_headless:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jdk-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jdk_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jdk-headless","purl":"pkg:deb/ubuntu/openjdk-21-jdk-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jdk-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jdk-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-09","epss":0.00257,"percentile":0.17453}],"risk":0.1285,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-09","epss":0.00257,"percentile":0.17453}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"e79bfd836f98575d","cpes":["cpe:2.3:a:openjdk-21-jre-headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre-headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre_headless:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21-jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21_jre:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_21:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-21-jre-headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_21_jre_headless:21.0.12.1\\+1-1\\~26.04.4:*:*:*:*:*:*:*"],"name":"openjdk-21-jre-headless","purl":"pkg:deb/ubuntu/openjdk-21-jre-headless@21.0.12.1%2B1-1~26.04.4?arch=amd64&distro=ubuntu-26.04&upstream=openjdk-21","type":"deb","version":"21.0.12.1+1-1~26.04.4","language":"","licenses":["BSD-3-Clause","GPL-2","LGPL-2.1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-21-jre-headless/copyright","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/usr/share/doc/openjdk-21-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","layerID":"sha256:2a59183b106af77858b0116096e4342c0c4081069a1f11efb73c0722e51c8d19","accessPath":"/var/lib/dpkg/info/openjdk-21-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-21"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openjdk-21","version":"21.0.12.1+1-1~26.04.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-09","epss":0.00257,"percentile":0.17453}],"risk":0.1285,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-09","epss":0.00257,"percentile":0.17453}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"192c175d5c1b17cf","cpes":["cpe:2.3:a:login.defs:login.defs:1\\:4.17.4-2ubuntu3:*:*:*:*:*:*:*"],"name":"login.defs","purl":"pkg:deb/ubuntu/login.defs@1%3A4.17.4-2ubuntu3?arch=all&distro=ubuntu-26.04&upstream=shadow","type":"deb","version":"1:4.17.4-2ubuntu3","language":"","licenses":["BSD-3-clause","GPL-1","GPL-2","GPL-2+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/login.defs/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/login.defs/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/login.defs.conffiles","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/login.defs.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/login.defs.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/login.defs.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/login.defs.list","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/login.defs.list"},{"path":"/var/lib/dpkg/info/login.defs.postinst","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/login.defs.postinst"}],"upstreams":[{"name":"shadow"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-56433","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"shadow","version":"1:4.17.4-2ubuntu3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2024-56433","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2024-56433","cwe":"CWE-1188","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2024-56433","date":"2026-11-09","epss":0.00426,"percentile":0.37177}],"risk":0.1278,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-56433"},"relatedVulnerabilities":[{"id":"CVE-2024-56433","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56433","cwe":"CWE-1188","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2024-56433","date":"2026-11-09","epss":0.00426,"percentile":0.37177}],"urls":["https://github.com/shadow-maint/shadow/blob/e2512d5741d4a44bdd81a8c2d0029b6222728cf0/etc/login.defs#L238-L241","https://github.com/shadow-maint/shadow/issues/1157","https://github.com/shadow-maint/shadow/releases/tag/4.4","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-56433","description":"shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid."}]},{"artifact":{"id":"50cd5c7e27977f62","cpes":["cpe:2.3:a:passwd:passwd:1\\:4.17.4-2ubuntu3:*:*:*:*:*:*:*"],"name":"passwd","purl":"pkg:deb/ubuntu/passwd@1%3A4.17.4-2ubuntu3?arch=amd64&distro=ubuntu-26.04&upstream=shadow","type":"deb","version":"1:4.17.4-2ubuntu3","language":"","licenses":["BSD-3-clause","GPL-1","GPL-2","GPL-2+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/passwd/copyright","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/usr/share/doc/passwd/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/passwd.conffiles","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/passwd.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/passwd.md5sums","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/passwd.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/passwd.list","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/passwd.list"},{"path":"/var/lib/dpkg/info/passwd.postinst","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/passwd.postinst"},{"path":"/var/lib/dpkg/info/passwd.postrm","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/passwd.postrm"},{"path":"/var/lib/dpkg/info/passwd.preinst","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/passwd.preinst"},{"path":"/var/lib/dpkg/info/passwd.prerm","layerID":"sha256:edf698db7561f9f53f2b22b9d417f9fde0be95175736b6954c7ef917c7114cb1","accessPath":"/var/lib/dpkg/info/passwd.prerm"}],"upstreams":[{"name":"shadow"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-56433","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"shadow","version":"1:4.17.4-2ubuntu3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2024-56433","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2024-56433","cwe":"CWE-1188","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2024-56433","date":"2026-11-09","epss":0.00426,"percentile":0.37177}],"risk":0.1278,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-56433"},"relatedVulnerabilities":[{"id":"CVE-2024-56433","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56433","cwe":"CWE-1188","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2024-56433","date":"2026-11-09","epss":0.00426,"percentile":0.37177}],"urls":["https://github.com/shadow-maint/shadow/blob/e2512d5741d4a44bdd81a8c2d0029b6222728cf0/etc/login.defs#L238-L241","https://github.com/shadow-maint/shadow/issues/1157","https://github.com/shadow-maint/shadow/releases/tag/4.4","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-56433","description":"shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid."}]},{"artifact":{"id":"d52116fcb0484365","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/ubuntu/libpython3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84366","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-84366","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-84366","cwe":"CWE-319","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84366","date":"2026-11-09","epss":0.00254,"percentile":0.17131}],"risk":0.127,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84366"},"relatedVulnerabilities":[{"id":"CVE-2026-84366","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84366","cwe":"CWE-319","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84366","date":"2026-11-09","epss":0.00254,"percentile":0.17131}],"urls":["https://github.com/scrapy/scrapy/commit/9523e1ec8c41fde265a26d14563d178b6f1ad04b","https://github.com/scrapy/scrapy/releases/tag/2.17.0","https://github.com/scrapy/scrapy/security/advisories/GHSA-76g3-c3x4-crvx"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84366","description":"Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler converts an S3-scheme bucket and key request into a plaintext HTTP request to the corresponding S3 endpoint unless request.meta[\"is_secure\"] is explicitly enabled, then signs and sends the plaintext request with configured AWS credentials. A network attacker who can observe traffic between Scrapy and S3 can read the bucket and key path, AWS Authorization header, X-Amz-Security-Token when temporary credentials are used, S3 object contents, and S3 response headers. An active man-in-the-middle attacker can also modify the plaintext S3 response body, status code, and headers before Scrapy processes them, causing scraped-data poisoning, poisoned exports, HTTP cache poisoning when caching is enabled, or influence over later crawl targets through forged redirects or attacker-controlled links. Users making S3-scheme requests with AWS credentials are affected. This issue is fixed in version 2.17.0."}]},{"artifact":{"id":"77ffe3ed9759aaf3","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/ubuntu/libpython3.14-stdlib@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84366","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-84366","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-84366","cwe":"CWE-319","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84366","date":"2026-11-09","epss":0.00254,"percentile":0.17131}],"risk":0.127,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84366"},"relatedVulnerabilities":[{"id":"CVE-2026-84366","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84366","cwe":"CWE-319","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84366","date":"2026-11-09","epss":0.00254,"percentile":0.17131}],"urls":["https://github.com/scrapy/scrapy/commit/9523e1ec8c41fde265a26d14563d178b6f1ad04b","https://github.com/scrapy/scrapy/releases/tag/2.17.0","https://github.com/scrapy/scrapy/security/advisories/GHSA-76g3-c3x4-crvx"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84366","description":"Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler converts an S3-scheme bucket and key request into a plaintext HTTP request to the corresponding S3 endpoint unless request.meta[\"is_secure\"] is explicitly enabled, then signs and sends the plaintext request with configured AWS credentials. A network attacker who can observe traffic between Scrapy and S3 can read the bucket and key path, AWS Authorization header, X-Amz-Security-Token when temporary credentials are used, S3 object contents, and S3 response headers. An active man-in-the-middle attacker can also modify the plaintext S3 response body, status code, and headers before Scrapy processes them, causing scraped-data poisoning, poisoned exports, HTTP cache poisoning when caching is enabled, or influence over later crawl targets through forged redirects or attacker-controlled links. Users making S3-scheme requests with AWS credentials are affected. This issue is fixed in version 2.17.0."}]},{"artifact":{"id":"f99724c52194474b","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/ubuntu/python3.14@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-84366","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-84366","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-84366","cwe":"CWE-319","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84366","date":"2026-11-09","epss":0.00254,"percentile":0.17131}],"risk":0.127,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84366"},"relatedVulnerabilities":[{"id":"CVE-2026-84366","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84366","cwe":"CWE-319","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84366","date":"2026-11-09","epss":0.00254,"percentile":0.17131}],"urls":["https://github.com/scrapy/scrapy/commit/9523e1ec8c41fde265a26d14563d178b6f1ad04b","https://github.com/scrapy/scrapy/releases/tag/2.17.0","https://github.com/scrapy/scrapy/security/advisories/GHSA-76g3-c3x4-crvx"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84366","description":"Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler converts an S3-scheme bucket and key request into a plaintext HTTP request to the corresponding S3 endpoint unless request.meta[\"is_secure\"] is explicitly enabled, then signs and sends the plaintext request with configured AWS credentials. A network attacker who can observe traffic between Scrapy and S3 can read the bucket and key path, AWS Authorization header, X-Amz-Security-Token when temporary credentials are used, S3 object contents, and S3 response headers. An active man-in-the-middle attacker can also modify the plaintext S3 response body, status code, and headers before Scrapy processes them, causing scraped-data poisoning, poisoned exports, HTTP cache poisoning when caching is enabled, or influence over later crawl targets through forged redirects or attacker-controlled links. Users making S3-scheme requests with AWS credentials are affected. This issue is fixed in version 2.17.0."}]},{"artifact":{"id":"7649a463206ce6e8","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/ubuntu/python3.14-minimal@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84366","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-84366","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-84366","cwe":"CWE-319","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84366","date":"2026-11-09","epss":0.00254,"percentile":0.17131}],"risk":0.127,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84366"},"relatedVulnerabilities":[{"id":"CVE-2026-84366","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84366","cwe":"CWE-319","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84366","date":"2026-11-09","epss":0.00254,"percentile":0.17131}],"urls":["https://github.com/scrapy/scrapy/commit/9523e1ec8c41fde265a26d14563d178b6f1ad04b","https://github.com/scrapy/scrapy/releases/tag/2.17.0","https://github.com/scrapy/scrapy/security/advisories/GHSA-76g3-c3x4-crvx"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84366","description":"Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler converts an S3-scheme bucket and key request into a plaintext HTTP request to the corresponding S3 endpoint unless request.meta[\"is_secure\"] is explicitly enabled, then signs and sends the plaintext request with configured AWS credentials. A network attacker who can observe traffic between Scrapy and S3 can read the bucket and key path, AWS Authorization header, X-Amz-Security-Token when temporary credentials are used, S3 object contents, and S3 response headers. An active man-in-the-middle attacker can also modify the plaintext S3 response body, status code, and headers before Scrapy processes them, causing scraped-data poisoning, poisoned exports, HTTP cache poisoning when caching is enabled, or influence over later crawl targets through forged redirects or attacker-controlled links. Users making S3-scheme requests with AWS credentials are affected. This issue is fixed in version 2.17.0."}]},{"artifact":{"id":"eed754d24bac483a","cpes":["cpe:2.3:a:python3.14-venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_venv:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_venv:3.14.4-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"python3.14-venv","purl":"pkg:deb/ubuntu/python3.14-venv@3.14.4-1ubuntu0.2?arch=amd64&distro=ubuntu-26.04&upstream=python3.14","type":"deb","version":"3.14.4-1ubuntu0.2","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:51ba028a0665a4106b02dca0178eb66b9432af10463aee459be7cbd88cfc50bd","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/usr/share/doc/python3.14-venv/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.md5sums","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-venv.list","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.list"},{"path":"/var/lib/dpkg/info/python3.14-venv.postinst","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postinst"},{"path":"/var/lib/dpkg/info/python3.14-venv.postrm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.postrm"},{"path":"/var/lib/dpkg/info/python3.14-venv.prerm","layerID":"sha256:24390692997cb0fa26af90ec8e6e33b949abbb43bf286caf78f43402c1909894","accessPath":"/var/lib/dpkg/info/python3.14-venv.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84366","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"python3.14","version":"3.14.4-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-84366","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-84366","cwe":"CWE-319","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84366","date":"2026-11-09","epss":0.00254,"percentile":0.17131}],"risk":0.127,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84366"},"relatedVulnerabilities":[{"id":"CVE-2026-84366","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84366","cwe":"CWE-319","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-84366","date":"2026-11-09","epss":0.00254,"percentile":0.17131}],"urls":["https://github.com/scrapy/scrapy/commit/9523e1ec8c41fde265a26d14563d178b6f1ad04b","https://github.com/scrapy/scrapy/releases/tag/2.17.0","https://github.com/scrapy/scrapy/security/advisories/GHSA-76g3-c3x4-crvx"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84366","description":"Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler converts an S3-scheme bucket and key request into a plaintext HTTP request to the corresponding S3 endpoint unless request.meta[\"is_secure\"] is explicitly enabled, then signs and sends the plaintext request with configured AWS credentials. A network attacker who can observe traffic between Scrapy and S3 can read the bucket and key path, AWS Authorization header, X-Amz-Security-Token when temporary credentials are used, S3 object contents, and S3 response headers. An active man-in-the-middle attacker can also modify the plaintext S3 response body, status code, and headers before Scrapy processes them, causing scraped-data poisoning, poisoned exports, HTTP cache poisoning when caching is enabled, or influence over later crawl targets through forged redirects or attacker-controlled links. Users making S3-scheme requests with AWS credentials are affected. This issue is fixed in version 2.17.0."}]}],"grade":"F","score":"0.00","as_of":"2026-11-10T18:44:58.244Z","grype_db_version":"2026-11-10T06:21:20.000Z"}