{"grype_matches":[{"artifact":{"id":"5aa5fc0ebbc6f0c0","cpes":["cpe:2.3:a:org.jenkins-ci.main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:org.jenkins-ci.main:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins_core:2.407:*:*:*:*:*:*:*"],"name":"jenkins-core","purl":"pkg:maven/org.jenkins-ci.main/jenkins-core@2.407","type":"java-archive","version":"2.407","language":"java","licenses":["The MIT license"],"metadata":{"pomGroupID":"org.jenkins-ci.main","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","manifestName":"","pomArtifactID":"jenkins-core","archiveDigests":[{"value":"e7fc0a769dfabd6c316cde23c6bd1dd8a7c4d94b","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.426.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6f9g-cxwr-q5jr","versionConstraint":">=1.606,<=2.426.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.main:jenkins-core","version":"2.407"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-6f9g-cxwr-q5jr","fix":{"state":"fixed","versions":["2.426.3"],"available":[{"date":"2024-01-30","kind":"first-observed","version":"2.426.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-23897","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-23897","cwe":"CWE-27","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-23897","date":"2026-10-08","epss":0.99999,"percentile":0.99995}],"risk":100,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-23897","https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314","http://www.openwall.com/lists/oss-security/2024/01/24/6","http://packetstormsecurity.com/files/176839/Jenkins-2.441-LTS-2.426.3-CVE-2024-23897-Scanner.html","http://packetstormsecurity.com/files/176840/Jenkins-2.441-LTS-2.426.3-Arbitrary-File-Read.html","https://www.jenkins.io/changelog-stable/#v2.440.1","https://github.com/jenkinsci/jenkins/commit/554f03782057c499c49bbb06575f0d28b5200edb","https://www.sonarsource.com/blog/excessive-expansion-uncovering-critical-security-vulnerabilities-in-jenkins","https://www.vicarius.io/vsociety/posts/the-anatomy-of-a-jenkins-vulnerability-cve-2024-23897-revealed-1","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23897"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6f9g-cxwr-q5jr","description":"Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE","knownExploited":[{"cve":"CVE-2024-23897","cwes":["CWE-27"],"urls":["https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314","https://nvd.nist.gov/vuln/detail/CVE-2024-23897"],"dueDate":"2024-09-09","product":"Jenkins Command Line Interface (CLI)","dateAdded":"2024-08-19","vendorProject":"Jenkins","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"known"}]},"relatedVulnerabilities":[{"id":"CVE-2024-23897","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-23897","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-23897","cwe":"CWE-27","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-23897","date":"2026-10-08","epss":0.99999,"percentile":0.99995}],"urls":["http://packetstormsecurity.com/files/176839/Jenkins-2.441-LTS-2.426.3-CVE-2024-23897-Scanner.html","http://packetstormsecurity.com/files/176840/Jenkins-2.441-LTS-2.426.3-Arbitrary-File-Read.html","http://www.openwall.com/lists/oss-security/2024/01/24/6","https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314","https://www.sonarsource.com/blog/excessive-expansion-uncovering-critical-security-vulnerabilities-in-jenkins/","https://www.vicarius.io/vsociety/posts/the-anatomy-of-a-jenkins-vulnerability-cve-2024-23897-revealed-1","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23897"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-23897","description":"Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.","knownExploited":[{"cve":"CVE-2024-23897","cwes":["CWE-27"],"urls":["https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314","https://nvd.nist.gov/vuln/detail/CVE-2024-23897"],"dueDate":"2024-09-09","product":"Jenkins Command Line Interface (CLI)","dateAdded":"2024-08-19","vendorProject":"Jenkins","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"known"}]}]},{"artifact":{"id":"f7d1f53d5c409967","cpes":["cpe:2.3:a:libfreetype6:libfreetype6:2.10.4\\+dfsg-1\\+deb11u1:*:*:*:*:*:*:*"],"name":"libfreetype6","purl":"pkg:deb/debian/libfreetype6@2.10.4%2Bdfsg-1%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=freetype","type":"deb","version":"2.10.4+dfsg-1+deb11u1","language":"","licenses":["Apache-2.0","BSD-3-Clause","FSFAP","FSFUL","FSFULLR","FTL","GPL-2","GPL-2+","GPL-3","GPL-3+","MIT","OFL-1.1","OpenGroup-BSD-like","Permissive","Public-Domain","Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libfreetype6/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libfreetype6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libfreetype6:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libfreetype6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"freetype"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.10.4+dfsg-1+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-27363","versionConstraint":"< 2.10.4+dfsg-1+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"freetype","version":"2.10.4+dfsg-1+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-27363","fix":{"state":"fixed","versions":["2.10.4+dfsg-1+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"2.10.4+dfsg-1+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-27363","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-27363","date":"2026-10-08","epss":0.27775,"percentile":0.98048}],"risk":81.9,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-27363","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","knownExploited":[{"cve":"CVE-2025-27363","cwes":["CWE-787"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-27363"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://source.android.com/docs/security/bulletin/2025-05-01","dueDate":"2025-05-27","product":"FreeType","dateAdded":"2025-05-06","vendorProject":"FreeType","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2025-27363","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-assign@fb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-27363","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-27363","date":"2026-10-08","epss":0.27775,"percentile":0.98048}],"urls":["https://www.facebook.com/security/advisories/cve-2025-27363","http://www.openwall.com/lists/oss-security/2025/03/13/1","http://www.openwall.com/lists/oss-security/2025/03/13/11","http://www.openwall.com/lists/oss-security/2025/03/13/12","http://www.openwall.com/lists/oss-security/2025/03/13/2","http://www.openwall.com/lists/oss-security/2025/03/13/3","http://www.openwall.com/lists/oss-security/2025/03/13/8","http://www.openwall.com/lists/oss-security/2025/03/14/1","http://www.openwall.com/lists/oss-security/2025/03/14/2","http://www.openwall.com/lists/oss-security/2025/03/14/3","http://www.openwall.com/lists/oss-security/2025/03/14/4","http://www.openwall.com/lists/oss-security/2025/05/06/3","http://www.openwall.com/lists/oss-security/2026/04/16/5","http://www.openwall.com/lists/oss-security/2026/04/19/3","https://lists.debian.org/debian-lts-announce/2025/03/msg00030.html","https://source.android.com/docs/security/bulletin/2025-05-01","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27363"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-27363","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","knownExploited":[{"cve":"CVE-2025-27363","cwes":["CWE-787"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-27363"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://source.android.com/docs/security/bulletin/2025-05-01","dueDate":"2025-05-27","product":"FreeType","dateAdded":"2025-05-06","vendorProject":"FreeType","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"af7d166c6d421afa","cpes":["cpe:2.3:a:git:git:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git","purl":"pkg:deb/debian/git@1%3A2.30.2-1%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.list"},{"path":"/var/lib/dpkg/info/git.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postinst"},{"path":"/var/lib/dpkg/info/git.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postrm"},{"path":"/var/lib/dpkg/info/git.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.preinst"},{"path":"/var/lib/dpkg/info/git.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-48384","versionConstraint":"< 1:2.30.2-1+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-48384","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u5"],"available":[{"date":"2025-10-07","kind":"first-observed","version":"1:2.30.2-1+deb11u5"}]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":6.1,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48384","cwe":"CWE-59","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2025-48384","cwe":"CWE-436","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-48384","date":"2026-10-08","epss":0.042,"percentile":0.90696}],"risk":81.37500000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-48384","description":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.","knownExploited":[{"cve":"CVE-2025-48384","cwes":["CWE-59","CWE-436"],"urls":["https://access.redhat.com/errata/RHSA-2025:13933","https://alas.aws.amazon.com/AL2/ALAS2-2025-2941.html","https://linux.oracle.com/errata/ELSA-2025-11534.html","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48384","https://nvd.nist.gov/vuln/detail/CVE-2025-48384"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9","dueDate":"2025-09-15","product":"Git","dateAdded":"2025-08-25","vendorProject":"Git","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2025-48384","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":6.1,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48384","cwe":"CWE-59","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2025-48384","cwe":"CWE-436","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-48384","date":"2026-10-08","epss":0.042,"percentile":0.90696}],"urls":["https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9","http://seclists.org/fulldisclosure/2025/Sep/60","http://www.openwall.com/lists/oss-security/2025/07/08/4","https://lists.debian.org/debian-lts-announce/2025/10/msg00003.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48384"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48384","description":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.","knownExploited":[{"cve":"CVE-2025-48384","cwes":["CWE-59","CWE-436"],"urls":["https://access.redhat.com/errata/RHSA-2025:13933","https://alas.aws.amazon.com/AL2/ALAS2-2025-2941.html","https://linux.oracle.com/errata/ELSA-2025-11534.html","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48384","https://nvd.nist.gov/vuln/detail/CVE-2025-48384"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9","dueDate":"2025-09-15","product":"Git","dateAdded":"2025-08-25","vendorProject":"Git","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"64d1fb374de95eb2","cpes":["cpe:2.3:a:git-man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git-man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git-man","purl":"pkg:deb/debian/git-man@1%3A2.30.2-1%2Bdeb11u2?arch=all&distro=debian-11.7&upstream=git","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git-man/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git-man/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.list"}],"upstreams":[{"name":"git"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-48384","versionConstraint":"< 1:2.30.2-1+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-48384","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u5"],"available":[{"date":"2025-10-07","kind":"first-observed","version":"1:2.30.2-1+deb11u5"}]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":6.1,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48384","cwe":"CWE-59","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2025-48384","cwe":"CWE-436","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-48384","date":"2026-10-08","epss":0.042,"percentile":0.90696}],"risk":81.37500000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-48384","description":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.","knownExploited":[{"cve":"CVE-2025-48384","cwes":["CWE-59","CWE-436"],"urls":["https://access.redhat.com/errata/RHSA-2025:13933","https://alas.aws.amazon.com/AL2/ALAS2-2025-2941.html","https://linux.oracle.com/errata/ELSA-2025-11534.html","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48384","https://nvd.nist.gov/vuln/detail/CVE-2025-48384"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9","dueDate":"2025-09-15","product":"Git","dateAdded":"2025-08-25","vendorProject":"Git","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2025-48384","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":6.1,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48384","cwe":"CWE-59","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2025-48384","cwe":"CWE-436","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-48384","date":"2026-10-08","epss":0.042,"percentile":0.90696}],"urls":["https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9","http://seclists.org/fulldisclosure/2025/Sep/60","http://www.openwall.com/lists/oss-security/2025/07/08/4","https://lists.debian.org/debian-lts-announce/2025/10/msg00003.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48384"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48384","description":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.","knownExploited":[{"cve":"CVE-2025-48384","cwes":["CWE-59","CWE-436"],"urls":["https://access.redhat.com/errata/RHSA-2025:13933","https://alas.aws.amazon.com/AL2/ALAS2-2025-2941.html","https://linux.oracle.com/errata/ELSA-2025-11534.html","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48384","https://nvd.nist.gov/vuln/detail/CVE-2025-48384"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9","dueDate":"2025-09-15","product":"Git","dateAdded":"2025-08-25","vendorProject":"Git","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"b2e77aa5ecffb7d4","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4911","versionConstraint":"< 2.31-13+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-4911","fix":{"state":"fixed","versions":["2.31-13+deb11u7"],"available":[{"date":"2023-10-03","kind":"advisory","version":"2.31-13+deb11u7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4911","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4911","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4911","date":"2026-10-08","epss":0.63769,"percentile":0.99204}],"risk":80.325,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5514-1","link":"https://security-tracker.debian.org/tracker/DSA-5514-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-4911","description":"A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","knownExploited":[{"cve":"CVE-2023-4911","cwes":["CWE-122"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-4911"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://sourceware.org/git/?p=glibc.git; a=commitdiff; h=1056e5b4c3f2d90ed2b4a55f96add28da2f4c8fa, https://access.redhat.com/security/cve/cve-2023-4911, https://www.debian.org/security/2023/dsa-5514","dueDate":"2023-12-12","product":"GNU C Library","dateAdded":"2023-11-21","vendorProject":"GNU","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2023-4911","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4911","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4911","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4911","date":"2026-10-08","epss":0.63769,"percentile":0.99204}],"urls":["https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5454","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:5476","https://access.redhat.com/errata/RHSA-2024:0033","https://access.redhat.com/security/cve/CVE-2023-4911","https://bugzilla.redhat.com/show_bug.cgi?id=2238352","https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt","https://www.qualys.com/cve-2023-4911/","http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html","http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html","http://seclists.org/fulldisclosure/2023/Oct/11","http://www.openwall.com/lists/oss-security/2023/10/03/2","http://www.openwall.com/lists/oss-security/2023/10/03/3","http://www.openwall.com/lists/oss-security/2023/10/05/1","http://www.openwall.com/lists/oss-security/2023/10/13/11","http://www.openwall.com/lists/oss-security/2023/10/14/3","http://www.openwall.com/lists/oss-security/2023/10/14/5","http://www.openwall.com/lists/oss-security/2023/10/14/6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/","https://security.gentoo.org/glsa/202310-03","https://security.netapp.com/advisory/ntap-20231013-0006/","https://www.debian.org/security/2023/dsa-5514","https://www.exploit-db.com/exploits/52479","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-831302.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4911"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4911","description":"A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","knownExploited":[{"cve":"CVE-2023-4911","cwes":["CWE-122"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-4911"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://sourceware.org/git/?p=glibc.git; a=commitdiff; h=1056e5b4c3f2d90ed2b4a55f96add28da2f4c8fa, https://access.redhat.com/security/cve/cve-2023-4911, https://www.debian.org/security/2023/dsa-5514","dueDate":"2023-12-12","product":"GNU C Library","dateAdded":"2023-11-21","vendorProject":"GNU","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"c2e60422a6017463","cpes":["cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4911","versionConstraint":"< 2.31-13+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-4911","fix":{"state":"fixed","versions":["2.31-13+deb11u7"],"available":[{"date":"2023-10-03","kind":"advisory","version":"2.31-13+deb11u7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4911","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4911","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4911","date":"2026-10-08","epss":0.63769,"percentile":0.99204}],"risk":80.325,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5514-1","link":"https://security-tracker.debian.org/tracker/DSA-5514-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-4911","description":"A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","knownExploited":[{"cve":"CVE-2023-4911","cwes":["CWE-122"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-4911"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://sourceware.org/git/?p=glibc.git; a=commitdiff; h=1056e5b4c3f2d90ed2b4a55f96add28da2f4c8fa, https://access.redhat.com/security/cve/cve-2023-4911, https://www.debian.org/security/2023/dsa-5514","dueDate":"2023-12-12","product":"GNU C Library","dateAdded":"2023-11-21","vendorProject":"GNU","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2023-4911","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4911","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4911","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4911","date":"2026-10-08","epss":0.63769,"percentile":0.99204}],"urls":["https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5454","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:5476","https://access.redhat.com/errata/RHSA-2024:0033","https://access.redhat.com/security/cve/CVE-2023-4911","https://bugzilla.redhat.com/show_bug.cgi?id=2238352","https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt","https://www.qualys.com/cve-2023-4911/","http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html","http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html","http://seclists.org/fulldisclosure/2023/Oct/11","http://www.openwall.com/lists/oss-security/2023/10/03/2","http://www.openwall.com/lists/oss-security/2023/10/03/3","http://www.openwall.com/lists/oss-security/2023/10/05/1","http://www.openwall.com/lists/oss-security/2023/10/13/11","http://www.openwall.com/lists/oss-security/2023/10/14/3","http://www.openwall.com/lists/oss-security/2023/10/14/5","http://www.openwall.com/lists/oss-security/2023/10/14/6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/","https://security.gentoo.org/glsa/202310-03","https://security.netapp.com/advisory/ntap-20231013-0006/","https://www.debian.org/security/2023/dsa-5514","https://www.exploit-db.com/exploits/52479","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-831302.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4911"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4911","description":"A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","knownExploited":[{"cve":"CVE-2023-4911","cwes":["CWE-122"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-4911"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://sourceware.org/git/?p=glibc.git; a=commitdiff; h=1056e5b4c3f2d90ed2b4a55f96add28da2f4c8fa, https://access.redhat.com/security/cve/cve-2023-4911, https://www.debian.org/security/2023/dsa-5514","dueDate":"2023-12-12","product":"GNU C Library","dateAdded":"2023-11-21","vendorProject":"GNU","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"b14b9dda81b19a08","cpes":["cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2-14:libnghttp2_14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2_14:libnghttp2-14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2_14:libnghttp2_14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2:libnghttp2-14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2:libnghttp2_14:1.43.0-1:*:*:*:*:*:*:*"],"name":"libnghttp2-14","purl":"pkg:deb/debian/libnghttp2-14@1.43.0-1?arch=amd64&distro=debian-11.7&upstream=nghttp2","type":"deb","version":"1.43.0-1","language":"","licenses":["BSD-2-clause","Expat","GPL-3","GPL-3+","MIT","SIL-OFL-1.1","all-permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libnghttp2-14/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libnghttp2-14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libnghttp2-14:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libnghttp2-14:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"nghttp2"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.43.0-1+deb11u1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-44487","versionConstraint":"< 1.43.0-1+deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"nghttp2","version":"1.43.0-1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-44487","fix":{"state":"fixed","versions":["1.43.0-1+deb11u1"],"available":[{"date":"2023-12-01","kind":"advisory","version":"1.43.0-1+deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-44487","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-44487","date":"2026-10-08","epss":0.99999,"percentile":0.99998}],"risk":78.75000000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5570-1","link":"https://security-tracker.debian.org/tracker/DSA-5570-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-44487","description":"The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","knownExploited":[{"cve":"CVE-2023-44487","cwes":["CWE-400"],"urls":["https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://nvd.nist.gov/vuln/detail/CVE-2023-44487"],"notes":"This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","dueDate":"2023-10-31","product":"HTTP/2","dateAdded":"2023-10-10","vendorProject":"IETF","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2023-44487","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-44487","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-44487","date":"2026-10-08","epss":0.99999,"percentile":0.99998}],"urls":["http://www.openwall.com/lists/oss-security/2023/10/10/6","http://www.openwall.com/lists/oss-security/2023/10/10/7","http://www.openwall.com/lists/oss-security/2023/10/13/4","http://www.openwall.com/lists/oss-security/2023/10/13/9","http://www.openwall.com/lists/oss-security/2023/10/18/4","http://www.openwall.com/lists/oss-security/2023/10/18/8","http://www.openwall.com/lists/oss-security/2023/10/19/6","http://www.openwall.com/lists/oss-security/2023/10/20/8","https://access.redhat.com/security/cve/cve-2023-44487","https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/","https://aws.amazon.com/security/security-bulletins/AWS-2023-011/","https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/","https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/","https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack","https://blog.vespa.ai/cve-2023-44487/","https://bugzilla.proxmox.com/show_bug.cgi?id=4988","https://bugzilla.redhat.com/show_bug.cgi?id=2242803","https://bugzilla.suse.com/show_bug.cgi?id=1216123","https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9","https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/","https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack","https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125","https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715","https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve","https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764","https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088","https://github.com/Azure/AKS/issues/3947","https://github.com/Kong/kong/discussions/11741","https://github.com/advisories/GHSA-qppj-fm5r-hxr3","https://github.com/advisories/GHSA-vx74-f528-fxqg","https://github.com/advisories/GHSA-xpw8-rcwv-8f8p","https://github.com/akka/akka-http/issues/4323","https://github.com/alibaba/tengine/issues/1872","https://github.com/apache/apisix/issues/10320","https://github.com/apache/httpd-site/pull/10","https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113","https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2","https://github.com/apache/trafficserver/pull/10564","https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/caddyserver/caddy/issues/5877","https://github.com/caddyserver/caddy/releases/tag/v2.7.5","https://github.com/dotnet/announcements/issues/277","https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73","https://github.com/eclipse/jetty.project/issues/10679","https://github.com/envoyproxy/envoy/pull/30055","https://github.com/etcd-io/etcd/issues/16740","https://github.com/facebook/proxygen/pull/466","https://github.com/golang/go/issues/63417","https://github.com/grpc/grpc-go/pull/6703","https://github.com/grpc/grpc/releases/tag/v1.59.2","https://github.com/h2o/h2o/pull/3291","https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf","https://github.com/haproxy/haproxy/issues/2312","https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244","https://github.com/junkurihara/rust-rpxy/issues/97","https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1","https://github.com/kazu-yamamoto/http2/issues/93","https://github.com/kubernetes/kubernetes/pull/121120","https://github.com/line/armeria/pull/5232","https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632","https://github.com/micrictor/http2-rst-stream","https://github.com/microsoft/CBL-Mariner/pull/6381","https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61","https://github.com/nghttp2/nghttp2/pull/1961","https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0","https://github.com/ninenines/cowboy/issues/1615","https://github.com/nodejs/node/pull/50121","https://github.com/openresty/openresty/issues/930","https://github.com/opensearch-project/data-prepper/issues/3474","https://github.com/oqtane/oqtane.framework/discussions/3367","https://github.com/projectcontour/contour/pull/5826","https://github.com/tempesta-tech/tempesta/issues/1986","https://github.com/varnishcache/varnish-cache/issues/3996","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo","https://istio.io/latest/news/security/istio-security-2023-004/","https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/","https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html","https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html","https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/","https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html","https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html","https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html","https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487","https://my.f5.com/manage/s/article/K000137106","https://netty.io/news/2023/10/10/4-1-100-Final.html","https://news.ycombinator.com/item?id=37830987","https://news.ycombinator.com/item?id=37830998","https://news.ycombinator.com/item?id=37831062","https://news.ycombinator.com/item?id=37837043","https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/","https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected","https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20231016-0001/","https://security.netapp.com/advisory/ntap-20240426-0007/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://security.netapp.com/advisory/ntap-20240621-0007/","https://security.paloaltonetworks.com/CVE-2023-44487","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14","https://ubuntu.com/security/CVE-2023-44487","https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/","https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522","https://www.debian.org/security/2023/dsa-5540","https://www.debian.org/security/2023/dsa-5549","https://www.debian.org/security/2023/dsa-5558","https://www.debian.org/security/2023/dsa-5570","https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487","https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/","https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","https://www.openwall.com/lists/oss-security/2023/10/10/6","https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack","https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/","http://www.openwall.com/lists/oss-security/2025/08/13/6","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/","https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-784301.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487","https://github.com/envoyproxy/envoy/security/advisories/GHSA-jhv4-f7mr-xx76","https://github.com/kubernetes/ingress-nginx/blob/4b5c5efe2508dc915a48c54de7f23912ff2ec695/changelog/controller-1.9.3.md?plain=1#L15","https://varnish-cache.org/releases/rel6.0.12.html#rel6-0-12","https://varnish-cache.org/releases/rel7.3.1.html#rel7-3-1","https://varnish-cache.org/releases/rel7.4.2.html#rel7-4-2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","description":"The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","knownExploited":[{"cve":"CVE-2023-44487","cwes":["CWE-400"],"urls":["https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://nvd.nist.gov/vuln/detail/CVE-2023-44487"],"notes":"This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","dueDate":"2023-10-31","product":"HTTP/2","dateAdded":"2023-10-10","vendorProject":"IETF","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"18fe59522fcbc583","cpes":["cpe:2.3:a:org.yaml.snakeyaml:snakeyaml:1.32:*:*:*:*:*:*:*","cpe:2.3:a:snakeyaml:snakeyaml:1.32:*:*:*:*:*:*:*","cpe:2.3:a:org.yaml:snakeyaml:1.32:*:*:*:*:*:*:*","cpe:2.3:a:yaml:snakeyaml:1.32:*:*:*:*:*:*:*"],"name":"snakeyaml","purl":"pkg:maven/org.yaml/snakeyaml@1.32","type":"java-archive","version":"1.32","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.yaml","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/snakeyaml-api.hpi:WEB-INF/lib/snakeyaml-1.32.jar","manifestName":"","pomArtifactID":"snakeyaml","archiveDigests":[{"value":"e80612549feb5c9191c498de628c1aa80693cf0b","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/snakeyaml-api.hpi:WEB-INF/lib/snakeyaml-1.32.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mjmj-j48q-9wg2","versionConstraint":"<=1.33 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.yaml:snakeyaml","version":"1.32"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-mjmj-j48q-9wg2","fix":{"state":"fixed","versions":["2.0"],"available":[{"date":"2023-03-05","kind":"first-observed","version":"2.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":8.3,"impactScore":5.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1471","cwe":"CWE-20","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-1471","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1471","date":"2026-10-08","epss":0.99569,"percentile":0.99946}],"risk":78.65951,"urls":["https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2","https://nvd.nist.gov/vuln/detail/CVE-2022-1471","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64634374","https://bitbucket.org/snakeyaml/snakeyaml/wiki/CVE-2022-1471","https://github.com/mbechler/marshalsec","https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true","https://bitbucket.org/snakeyaml/snakeyaml/commits/5014df1a36f50aca54405bb8433bc99a8847f758","https://bitbucket.org/snakeyaml/snakeyaml/commits/acc44099f5f4af26ff86b4e4e4cc1c874e2dc5c4","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64876314","https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc","http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html","http://www.openwall.com/lists/oss-security/2023/11/19/1","https://security.netapp.com/advisory/ntap-20230818-0015","https://security.netapp.com/advisory/ntap-20240621-0006","https://snyk.io/blog/unsafe-deserialization-snakeyaml-java-cve-2022-1471","https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html","https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mjmj-j48q-9wg2","description":"SnakeYaml Constructor Deserialization Remote Code Execution"},"relatedVulnerabilities":[{"id":"CVE-2022-1471","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":8.3,"impactScore":5.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1471","cwe":"CWE-20","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-1471","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1471","date":"2026-10-08","epss":0.99569,"percentile":0.99946}],"urls":["http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html","http://www.openwall.com/lists/oss-security/2023/11/19/1","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479","https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html","https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2","https://github.com/mbechler/marshalsec","https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc","https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c","https://security.netapp.com/advisory/ntap-20230818-0015/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1471","description":"SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond."}]},{"artifact":{"id":"91cb71301942f4bc","cpes":["cpe:2.3:a:org.yaml.snakeyaml:snakeyaml:1.33:*:*:*:*:*:*:*","cpe:2.3:a:snakeyaml:snakeyaml:1.33:*:*:*:*:*:*:*","cpe:2.3:a:org.yaml:snakeyaml:1.33:*:*:*:*:*:*:*","cpe:2.3:a:yaml:snakeyaml:1.33:*:*:*:*:*:*:*"],"name":"snakeyaml","purl":"pkg:maven/org.yaml/snakeyaml@1.33","type":"java-archive","version":"1.33","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.yaml","virtualPath":"/usr/share/jenkins/ref/plugins/snakeyaml-api.jpi:WEB-INF/lib/snakeyaml-1.33.jar","manifestName":"","pomArtifactID":"snakeyaml","archiveDigests":[{"value":"2cd0a87ff7df953f810c344bdf2fe3340b954c69","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/snakeyaml-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/snakeyaml-api.jpi:WEB-INF/lib/snakeyaml-1.33.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mjmj-j48q-9wg2","versionConstraint":"<=1.33 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.yaml:snakeyaml","version":"1.33"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-mjmj-j48q-9wg2","fix":{"state":"fixed","versions":["2.0"],"available":[{"date":"2023-03-05","kind":"first-observed","version":"2.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":8.3,"impactScore":5.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1471","cwe":"CWE-20","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-1471","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1471","date":"2026-10-08","epss":0.99569,"percentile":0.99946}],"risk":78.65951,"urls":["https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2","https://nvd.nist.gov/vuln/detail/CVE-2022-1471","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64634374","https://bitbucket.org/snakeyaml/snakeyaml/wiki/CVE-2022-1471","https://github.com/mbechler/marshalsec","https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true","https://bitbucket.org/snakeyaml/snakeyaml/commits/5014df1a36f50aca54405bb8433bc99a8847f758","https://bitbucket.org/snakeyaml/snakeyaml/commits/acc44099f5f4af26ff86b4e4e4cc1c874e2dc5c4","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64876314","https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc","http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html","http://www.openwall.com/lists/oss-security/2023/11/19/1","https://security.netapp.com/advisory/ntap-20230818-0015","https://security.netapp.com/advisory/ntap-20240621-0006","https://snyk.io/blog/unsafe-deserialization-snakeyaml-java-cve-2022-1471","https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html","https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mjmj-j48q-9wg2","description":"SnakeYaml Constructor Deserialization Remote Code Execution"},"relatedVulnerabilities":[{"id":"CVE-2022-1471","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":8.3,"impactScore":5.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1471","cwe":"CWE-20","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-1471","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1471","date":"2026-10-08","epss":0.99569,"percentile":0.99946}],"urls":["http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html","http://www.openwall.com/lists/oss-security/2023/11/19/1","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479","https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html","https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2","https://github.com/mbechler/marshalsec","https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc","https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c","https://security.netapp.com/advisory/ntap-20230818-0015/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1471","description":"SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond."}]},{"artifact":{"id":"87daae774bb033cc","cpes":["cpe:2.3:a:snakeyaml:snakeyaml:1.33:*:*:*:*:*:*:*","cpe:2.3:a:org.yaml:snakeyaml:1.33:*:*:*:*:*:*:*","cpe:2.3:a:yaml:snakeyaml:1.33:*:*:*:*:*:*:*"],"name":"snakeyaml","purl":"pkg:maven/org.yaml/snakeyaml@1.33","type":"java-archive","version":"1.33","language":"java","licenses":["Apache License, Version 2.0"],"metadata":{"pomGroupID":"org.yaml","virtualPath":"/opt/jenkins-plugin-manager.jar:org.yaml:snakeyaml","manifestName":"","pomArtifactID":"snakeyaml","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:28ce38a426e8c5f4d5c1503345486bf2d71355572ce12a34d66ff30128719565","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mjmj-j48q-9wg2","versionConstraint":"<=1.33 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.yaml:snakeyaml","version":"1.33"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-mjmj-j48q-9wg2","fix":{"state":"fixed","versions":["2.0"],"available":[{"date":"2023-03-05","kind":"first-observed","version":"2.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":8.3,"impactScore":5.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1471","cwe":"CWE-20","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-1471","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1471","date":"2026-10-08","epss":0.99569,"percentile":0.99946}],"risk":78.65951,"urls":["https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2","https://nvd.nist.gov/vuln/detail/CVE-2022-1471","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64634374","https://bitbucket.org/snakeyaml/snakeyaml/wiki/CVE-2022-1471","https://github.com/mbechler/marshalsec","https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true","https://bitbucket.org/snakeyaml/snakeyaml/commits/5014df1a36f50aca54405bb8433bc99a8847f758","https://bitbucket.org/snakeyaml/snakeyaml/commits/acc44099f5f4af26ff86b4e4e4cc1c874e2dc5c4","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64876314","https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc","http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html","http://www.openwall.com/lists/oss-security/2023/11/19/1","https://security.netapp.com/advisory/ntap-20230818-0015","https://security.netapp.com/advisory/ntap-20240621-0006","https://snyk.io/blog/unsafe-deserialization-snakeyaml-java-cve-2022-1471","https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html","https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mjmj-j48q-9wg2","description":"SnakeYaml Constructor Deserialization Remote Code Execution"},"relatedVulnerabilities":[{"id":"CVE-2022-1471","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":8.3,"impactScore":5.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1471","cwe":"CWE-20","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-1471","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1471","date":"2026-10-08","epss":0.99569,"percentile":0.99946}],"urls":["http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html","http://www.openwall.com/lists/oss-security/2023/11/19/1","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479","https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html","https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2","https://github.com/mbechler/marshalsec","https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc","https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c","https://security.netapp.com/advisory/ntap-20230818-0015/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1471","description":"SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond."}]},{"artifact":{"id":"b1b865057b4a53ab","cpes":["cpe:2.3:a:libsystemd0:libsystemd0:247.3-7\\+deb11u2:*:*:*:*:*:*:*"],"name":"libsystemd0","purl":"pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=systemd","type":"deb","version":"247.3-7+deb11u2","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsystemd0/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libsystemd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"fix":{"suggestedVersion":"247.3-7+deb11u6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50387","versionConstraint":"< 247.3-7+deb11u6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"systemd","version":"247.3-7+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-50387","fix":{"state":"fixed","versions":["247.3-7+deb11u6"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"247.3-7+deb11u6"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50387","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-50387","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-50387","date":"2026-10-08","epss":0.99988,"percentile":0.99984}],"risk":74.991,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-50387","description":"Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records."},"relatedVulnerabilities":[{"id":"CVE-2023-50387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50387","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-50387","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-50387","date":"2026-10-08","epss":0.99988,"percentile":0.99984}],"urls":["http://www.openwall.com/lists/oss-security/2024/02/16/2","http://www.openwall.com/lists/oss-security/2024/02/16/3","https://access.redhat.com/security/cve/CVE-2023-50387","https://bugzilla.suse.com/show_bug.cgi?id=1219823","https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html","https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1","https://kb.isc.org/docs/cve-2023-50387","https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html","https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/","https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387","https://news.ycombinator.com/item?id=39367411","https://news.ycombinator.com/item?id=39372384","https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/","https://security.netapp.com/advisory/ntap-20240307-0007/","https://www.athene-center.de/aktuelles/key-trap","https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf","https://www.isc.org/blogs/2024-bind-security-release/","https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/","https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/","https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50387","description":"Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records."}]},{"artifact":{"id":"7eda2e8b2cc08c93","cpes":["cpe:2.3:a:libudev1:libudev1:247.3-7\\+deb11u2:*:*:*:*:*:*:*"],"name":"libudev1","purl":"pkg:deb/debian/libudev1@247.3-7%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=systemd","type":"deb","version":"247.3-7+deb11u2","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libudev1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libudev1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libudev1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libudev1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"fix":{"suggestedVersion":"247.3-7+deb11u6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50387","versionConstraint":"< 247.3-7+deb11u6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"systemd","version":"247.3-7+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-50387","fix":{"state":"fixed","versions":["247.3-7+deb11u6"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"247.3-7+deb11u6"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50387","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-50387","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-50387","date":"2026-10-08","epss":0.99988,"percentile":0.99984}],"risk":74.991,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-50387","description":"Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records."},"relatedVulnerabilities":[{"id":"CVE-2023-50387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50387","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-50387","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-50387","date":"2026-10-08","epss":0.99988,"percentile":0.99984}],"urls":["http://www.openwall.com/lists/oss-security/2024/02/16/2","http://www.openwall.com/lists/oss-security/2024/02/16/3","https://access.redhat.com/security/cve/CVE-2023-50387","https://bugzilla.suse.com/show_bug.cgi?id=1219823","https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html","https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1","https://kb.isc.org/docs/cve-2023-50387","https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html","https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/","https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387","https://news.ycombinator.com/item?id=39367411","https://news.ycombinator.com/item?id=39372384","https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/","https://security.netapp.com/advisory/ntap-20240307-0007/","https://www.athene-center.de/aktuelles/key-trap","https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf","https://www.isc.org/blogs/2024-bind-security-release/","https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/","https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/","https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50387","description":"Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records."}]},{"artifact":{"id":"c3466eb679e28aa6","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A8.4p1-5%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=openssh","type":"deb","version":"1:8.4p1-5+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Beer-ware","Expat-with-advertising-restriction","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-client/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:8.4p1-5+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-38408","versionConstraint":"< 1:8.4p1-5+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssh","version":"1:8.4p1-5+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-38408","fix":{"state":"fixed","versions":["1:8.4p1-5+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:8.4p1-5+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-38408","cwe":"CWE-428","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-38408","cwe":"CWE-428","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-38408","date":"2026-10-08","epss":0.797,"percentile":0.99601}],"risk":74.918,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-38408","description":"The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009."},"relatedVulnerabilities":[{"id":"CVE-2023-38408","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-38408","cwe":"CWE-428","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-38408","cwe":"CWE-428","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-38408","date":"2026-10-08","epss":0.797,"percentile":0.99601}],"urls":["http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html","http://www.openwall.com/lists/oss-security/2023/07/20/1","http://www.openwall.com/lists/oss-security/2023/07/20/2","http://www.openwall.com/lists/oss-security/2023/09/22/11","http://www.openwall.com/lists/oss-security/2023/09/22/9","https://blog.qualys.com/vulnerabilities-threat-research/2023/07/19/cve-2023-38408-remote-code-execution-in-opensshs-forwarded-ssh-agent","https://github.com/openbsd/src/commit/7bc29a9d5cd697290aa056e94ecee6253d3425f8","https://github.com/openbsd/src/commit/f03a4faa55c4ce0818324701dadbf91988d7351d","https://github.com/openbsd/src/commit/f8f5a6b003981bb824329dc987d101977beda7ca","https://lists.debian.org/debian-lts-announce/2023/08/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CEBTJJINE2I3FHAUKKNQWMFGYMLSMWKQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAXVQS6ZYTULFAK3TEJHRLKZALJS3AOU/","https://news.ycombinator.com/item?id=36790196","https://security.gentoo.org/glsa/202307-01","https://security.netapp.com/advisory/ntap-20230803-0010/","https://support.apple.com/kb/HT213940","https://www.openssh.com/security.html","https://www.openssh.com/txt/release-9.3p2","https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt","https://www.vicarius.io/vsociety/posts/exploring-opensshs-agent-forwarding-rce-cve-2023-38408"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-38408","description":"The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u10"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-38545","versionConstraint":"< 7.74.0-1.3+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-38545","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u10"],"available":[{"date":"2023-10-11","kind":"advisory","version":"7.74.0-1.3+deb11u10"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-38545","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-38545","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-38545","date":"2026-10-08","epss":0.78483,"percentile":0.99577}],"risk":73.77402000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5523-1","link":"https://security-tracker.debian.org/tracker/DSA-5523-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-38545","description":"This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake.  When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes.  If the host name is detected to be longer, curl switches to local name resolving and instead passes on the resolved address only. Due to this bug, the local variable that means \"let the host resolve the name\" could get the wrong value during a slow SOCKS5 handshake, and contrary to the intention, copy the too long host name to the target buffer instead of copying just the resolved address there.  The target buffer being a heap based buffer, and the host name coming from the URL that curl has been told to operate with."},"relatedVulnerabilities":[{"id":"CVE-2023-38545","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-38545","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-38545","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-38545","date":"2026-10-08","epss":0.78483,"percentile":0.99577}],"urls":["http://seclists.org/fulldisclosure/2024/Jan/34","http://seclists.org/fulldisclosure/2024/Jan/37","http://seclists.org/fulldisclosure/2024/Jan/38","https://curl.se/docs/CVE-2023-38545.html","https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/","https://security.netapp.com/advisory/ntap-20231027-0009/","https://security.netapp.com/advisory/ntap-20240201-0005/","https://support.apple.com/kb/HT214036","https://support.apple.com/kb/HT214057","https://support.apple.com/kb/HT214058","https://support.apple.com/kb/HT214063","https://www.secpod.com/blog/high-severity-heap-buffer-overflow-vulnerability/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-507364.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-943925.html","https://github.com/UTsweetyfish/CVE-2023-38545","https://github.com/bcdannyboy/CVE-2023-38545","https://github.com/dbrugman/CVE-2023-38545-POC"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-38545","description":"This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-38545","versionConstraint":"< 7.74.0-1.3+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-38545","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u10"],"available":[{"date":"2023-10-11","kind":"advisory","version":"7.74.0-1.3+deb11u10"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-38545","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-38545","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-38545","date":"2026-10-08","epss":0.78483,"percentile":0.99577}],"risk":73.77402000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5523-1","link":"https://security-tracker.debian.org/tracker/DSA-5523-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-38545","description":"This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake.  When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes.  If the host name is detected to be longer, curl switches to local name resolving and instead passes on the resolved address only. Due to this bug, the local variable that means \"let the host resolve the name\" could get the wrong value during a slow SOCKS5 handshake, and contrary to the intention, copy the too long host name to the target buffer instead of copying just the resolved address there.  The target buffer being a heap based buffer, and the host name coming from the URL that curl has been told to operate with."},"relatedVulnerabilities":[{"id":"CVE-2023-38545","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-38545","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-38545","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-38545","date":"2026-10-08","epss":0.78483,"percentile":0.99577}],"urls":["http://seclists.org/fulldisclosure/2024/Jan/34","http://seclists.org/fulldisclosure/2024/Jan/37","http://seclists.org/fulldisclosure/2024/Jan/38","https://curl.se/docs/CVE-2023-38545.html","https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/","https://security.netapp.com/advisory/ntap-20231027-0009/","https://security.netapp.com/advisory/ntap-20240201-0005/","https://support.apple.com/kb/HT214036","https://support.apple.com/kb/HT214057","https://support.apple.com/kb/HT214058","https://support.apple.com/kb/HT214063","https://www.secpod.com/blog/high-severity-heap-buffer-overflow-vulnerability/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-507364.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-943925.html","https://github.com/UTsweetyfish/CVE-2023-38545","https://github.com/bcdannyboy/CVE-2023-38545","https://github.com/dbrugman/CVE-2023-38545-POC"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-38545","description":"This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-38545","versionConstraint":"< 7.74.0-1.3+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-38545","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u10"],"available":[{"date":"2023-10-11","kind":"advisory","version":"7.74.0-1.3+deb11u10"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-38545","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-38545","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-38545","date":"2026-10-08","epss":0.78483,"percentile":0.99577}],"risk":73.77402000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5523-1","link":"https://security-tracker.debian.org/tracker/DSA-5523-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-38545","description":"This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake.  When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes.  If the host name is detected to be longer, curl switches to local name resolving and instead passes on the resolved address only. Due to this bug, the local variable that means \"let the host resolve the name\" could get the wrong value during a slow SOCKS5 handshake, and contrary to the intention, copy the too long host name to the target buffer instead of copying just the resolved address there.  The target buffer being a heap based buffer, and the host name coming from the URL that curl has been told to operate with."},"relatedVulnerabilities":[{"id":"CVE-2023-38545","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-38545","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-38545","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-38545","date":"2026-10-08","epss":0.78483,"percentile":0.99577}],"urls":["http://seclists.org/fulldisclosure/2024/Jan/34","http://seclists.org/fulldisclosure/2024/Jan/37","http://seclists.org/fulldisclosure/2024/Jan/38","https://curl.se/docs/CVE-2023-38545.html","https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/","https://security.netapp.com/advisory/ntap-20231027-0009/","https://security.netapp.com/advisory/ntap-20240201-0005/","https://support.apple.com/kb/HT214036","https://support.apple.com/kb/HT214057","https://support.apple.com/kb/HT214058","https://support.apple.com/kb/HT214063","https://www.secpod.com/blog/high-severity-heap-buffer-overflow-vulnerability/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-507364.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-943925.html","https://github.com/UTsweetyfish/CVE-2023-38545","https://github.com/bcdannyboy/CVE-2023-38545","https://github.com/dbrugman/CVE-2023-38545-POC"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-38545","description":"This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy\nhandshake.\n\nWhen curl is asked to pass along the host name to the SOCKS5 proxy to allow\nthat to resolve the address instead of it getting done by curl itself, the\nmaximum length that host name can be is 255 bytes.\n\nIf the host name is detected to be longer, curl switches to local name\nresolving and instead passes on the resolved address only. Due to this bug,\nthe local variable that means \"let the host resolve the name\" could get the\nwrong value during a slow SOCKS5 handshake, and contrary to the intention,\ncopy the too long host name to the target buffer instead of copying just the\nresolved address there.\n\nThe target buffer being a heap based buffer, and the host name coming from the\nURL that curl has been told to operate with."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.21.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2024-2687","versionConstraint":"<1.21.9||>=1.22.0-0,<1.22.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2024-2687","fix":{"state":"fixed","versions":["1.21.9","1.22.2"],"available":[{"date":"2024-04-03","kind":"release","version":"1.21.9"},{"date":"2024-04-03","kind":"release","version":"1.22.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-45288","date":"2026-10-08","epss":0.91969,"percentile":0.99819}],"risk":68.97675,"urls":["https://go.dev/cl/576155","https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/65051","description":"An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.\n\nMaintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed.\n\nThis permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send.\n\nThe fix sets a limit on the amount of excess header frames we will process before closing a connection."},"relatedVulnerabilities":[{"id":"CVE-2023-45288","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-45288","date":"2026-10-08","epss":0.91969,"percentile":0.99819}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/03/16","http://www.openwall.com/lists/oss-security/2024/04/05/4","https://go.dev/cl/576155","https://go.dev/issue/65051","https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/","https://pkg.go.dev/vuln/GO-2024-2687","https://security.netapp.com/advisory/ntap-20240419-0009/","https://www.kb.cert.org/vuls/id/421644"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-45288","description":"An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection."},{"id":"GHSA-4v7x-pqxf-cx7m","cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-45288","date":"2026-10-08","epss":0.91969,"percentile":0.99819}],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-45288","https://go.dev/cl/576155","https://go.dev/issue/65051","https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M","https://pkg.go.dev/vuln/GO-2024-2687","https://nowotarski.info/http2-continuation-flood-technical-details","https://security.netapp.com/advisory/ntap-20240419-0009","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT","http://www.openwall.com/lists/oss-security/2024/04/03/16","http://www.openwall.com/lists/oss-security/2024/04/05/4","https://www.kb.cert.org/vuls/id/421644"],"severity":"Medium","namespace":"github:language:go","dataSource":"https://github.com/advisories/GHSA-4v7x-pqxf-cx7m","description":"net/http, x/net/http2: close connections when receiving too many headers"}]},{"artifact":{"id":"b2e77aa5ecffb7d4","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2961","versionConstraint":"< 2.31-13+deb11u9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-2961","fix":{"state":"fixed","versions":["2.31-13+deb11u9"],"available":[{"date":"2024-04-23","kind":"advisory","version":"2.31-13+deb11u9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.3,"impactScore":4.8,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"risk":65.3642,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5673-1","link":"https://security-tracker.debian.org/tracker/DSA-5673-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-2961","description":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable."},"relatedVulnerabilities":[{"id":"CVE-2024-2961","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.3,"impactScore":4.8,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/17/9","http://www.openwall.com/lists/oss-security/2024/04/18/4","http://www.openwall.com/lists/oss-security/2024/04/24/2","http://www.openwall.com/lists/oss-security/2024/05/27/1","http://www.openwall.com/lists/oss-security/2024/05/27/2","http://www.openwall.com/lists/oss-security/2024/05/27/3","http://www.openwall.com/lists/oss-security/2024/05/27/4","http://www.openwall.com/lists/oss-security/2024/05/27/5","http://www.openwall.com/lists/oss-security/2024/05/27/6","http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/","https://security.netapp.com/advisory/ntap-20240531-0002/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004","https://www.ambionics.io/blog/iconv-cve-2024-2961-p1","https://www.ambionics.io/blog/iconv-cve-2024-2961-p2","https://www.ambionics.io/blog/iconv-cve-2024-2961-p3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2961","description":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable."}]},{"artifact":{"id":"c2e60422a6017463","cpes":["cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2961","versionConstraint":"< 2.31-13+deb11u9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-2961","fix":{"state":"fixed","versions":["2.31-13+deb11u9"],"available":[{"date":"2024-04-23","kind":"advisory","version":"2.31-13+deb11u9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.3,"impactScore":4.8,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"risk":65.3642,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5673-1","link":"https://security-tracker.debian.org/tracker/DSA-5673-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-2961","description":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable."},"relatedVulnerabilities":[{"id":"CVE-2024-2961","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.3,"impactScore":4.8,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/17/9","http://www.openwall.com/lists/oss-security/2024/04/18/4","http://www.openwall.com/lists/oss-security/2024/04/24/2","http://www.openwall.com/lists/oss-security/2024/05/27/1","http://www.openwall.com/lists/oss-security/2024/05/27/2","http://www.openwall.com/lists/oss-security/2024/05/27/3","http://www.openwall.com/lists/oss-security/2024/05/27/4","http://www.openwall.com/lists/oss-security/2024/05/27/5","http://www.openwall.com/lists/oss-security/2024/05/27/6","http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/","https://security.netapp.com/advisory/ntap-20240531-0002/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004","https://www.ambionics.io/blog/iconv-cve-2024-2961-p1","https://www.ambionics.io/blog/iconv-cve-2024-2961-p2","https://www.ambionics.io/blog/iconv-cve-2024-2961-p3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2961","description":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable."}]},{"artifact":{"id":"c103c066c49ae324","cpes":["cpe:2.3:a:golang:networking:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2","type":"go-module","version":"v0.0.0-20211112202133-69e39bad7dc2","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.17.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qppj-fm5r-hxr3","versionConstraint":"<0.17.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.0.0-20211112202133-69e39bad7dc2"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-qppj-fm5r-hxr3","fix":{"state":"fixed","versions":["0.17.0"],"available":[{"date":"2023-10-14","kind":"first-observed","version":"0.17.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:H","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:A","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-44487","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-44487","date":"2026-10-08","epss":0.99999,"percentile":0.99998}],"risk":58.275,"urls":["https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3","https://nvd.nist.gov/vuln/detail/CVE-2023-44487","https://github.com/alibaba/tengine/issues/1872","https://github.com/caddyserver/caddy/issues/5877","https://github.com/eclipse/jetty.project/issues/10679","https://github.com/haproxy/haproxy/issues/2312","https://github.com/hyperium/hyper/issues/3337","https://github.com/envoyproxy/envoy/pull/30055","https://github.com/grpc/grpc-go/pull/6703","https://github.com/nghttp2/nghttp2/pull/1961","https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61","https://bugzilla.proxmox.com/show_bug.cgi?id=4988","https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9","https://chaos.social/@icing/111210915918780532","https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack","https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764","https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244","https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0","https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html","https://my.f5.com/manage/s/article/K000137106","https://news.ycombinator.com/item?id=37830987","https://news.ycombinator.com/item?id=37830998","https://news.ycombinator.com/item?id=37831062","https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack","https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf","https://github.com/dotnet/announcements/issues/277","https://github.com/golang/go/issues/63417","https://github.com/apache/trafficserver/pull/10564","https://github.com/facebook/proxygen/pull/466","https://github.com/h2o/h2o/pull/3291","https://github.com/microsoft/CBL-Mariner/pull/6381","https://github.com/nodejs/node/pull/50121","https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve","https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088","https://github.com/advisories/GHSA-vx74-f528-fxqg","https://github.com/micrictor/http2-rst-stream","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo","https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487","https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14","https://www.openwall.com/lists/oss-security/2023/10/10/6","https://github.com/opensearch-project/data-prepper/issues/3474","https://github.com/kubernetes/kubernetes/pull/121120","https://github.com/advisories/GHSA-xpw8-rcwv-8f8p","https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73","https://github.com/oqtane/oqtane.framework/discussions/3367","https://netty.io/news/2023/10/10/4-1-100-Final.html","https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487","https://github.com/Azure/AKS/issues/3947","https://github.com/akka/akka-http/issues/4323","https://github.com/apache/apisix/issues/10320","https://github.com/etcd-io/etcd/issues/16740","https://github.com/junkurihara/rust-rpxy/issues/97","https://github.com/kazu-yamamoto/http2/issues/93","https://github.com/ninenines/cowboy/issues/1615","https://github.com/openresty/openresty/issues/930","https://github.com/tempesta-tech/tempesta/issues/1986","https://github.com/varnishcache/varnish-cache/issues/3996","https://github.com/apache/httpd-site/pull/10","https://github.com/line/armeria/pull/5232","https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632","https://github.com/projectcontour/contour/pull/5826","https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1","https://access.redhat.com/security/cve/cve-2023-44487","https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack","https://bugzilla.redhat.com/show_bug.cgi?id=2242803","https://bugzilla.suse.com/show_bug.cgi?id=1216123","https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125","https://github.com/Kong/kong/discussions/11741","https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113","https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487","https://github.com/caddyserver/caddy/releases/tag/v2.7.5","https://go.dev/cl/534215","https://go.dev/cl/534235","https://go.dev/issue/63417","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html","https://news.ycombinator.com/item?id=37837043","https://security.paloaltonetworks.com/CVE-2023-44487","https://ubuntu.com/security/CVE-2023-44487","https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522","http://www.openwall.com/lists/oss-security/2023/10/13/4","http://www.openwall.com/lists/oss-security/2023/10/13/9","https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html","https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html","https://github.com/grpc/grpc-go/releases","https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html","https://www.debian.org/security/2023/dsa-5540","http://www.openwall.com/lists/oss-security/2023/10/18/4","http://www.openwall.com/lists/oss-security/2023/10/18/8","http://www.openwall.com/lists/oss-security/2023/10/19/6","http://www.openwall.com/lists/oss-security/2023/10/20/8","https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715","https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html","https://www.debian.org/security/2023/dsa-5549","https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html","https://security.gentoo.org/glsa/202311-09","https://www.debian.org/security/2023/dsa-5558","https://www.debian.org/security/2023/dsa-5570","https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12","https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94","https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81","https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size","https://aws.amazon.com/security/security-bulletins/AWS-2023-011","https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack","https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack","https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty","https://blog.vespa.ai/cve-2023-44487","https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps","https://istio.io/latest/news/security/istio-security-2023-004","https://linkerd.io/2023/10/12/linkerd-cve-2023-44487","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4","https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2","https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response","https://security.netapp.com/advisory/ntap-20231016-0001","https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records","https://www.eclipse.org/lists/jetty-announce/msg00181.html","https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487","https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products","https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday","https://github.com/akka/akka-http/pull/4325","https://github.com/akka/akka-http/pull/4324","https://akka.io/security/akka-http-cve-2023-44487.html","https://security.netapp.com/advisory/ntap-20240426-0007","https://security.netapp.com/advisory/ntap-20240621-0006","https://security.netapp.com/advisory/ntap-20240621-0007","https://github.com/apache/tomcat/commit/944332bb15bd2f3bf76ec2caeb1ff0a58a3bc628","https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX","https://github.com/grpc/grpc/releases/tag/v1.59.2","http://www.openwall.com/lists/oss-security/2023/10/10/6","http://www.openwall.com/lists/oss-security/2023/10/10/7","https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-784301.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","http://www.openwall.com/lists/oss-security/2025/08/13/6"],"severity":"Medium","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qppj-fm5r-hxr3","description":"HTTP/2 Stream Cancellation Attack","knownExploited":[{"cve":"CVE-2023-44487","cwes":["CWE-400"],"urls":["https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://nvd.nist.gov/vuln/detail/CVE-2023-44487"],"notes":"This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","dueDate":"2023-10-31","product":"HTTP/2","dateAdded":"2023-10-10","vendorProject":"IETF","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2023-44487","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-44487","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-44487","date":"2026-10-08","epss":0.99999,"percentile":0.99998}],"urls":["http://www.openwall.com/lists/oss-security/2023/10/10/6","http://www.openwall.com/lists/oss-security/2023/10/10/7","http://www.openwall.com/lists/oss-security/2023/10/13/4","http://www.openwall.com/lists/oss-security/2023/10/13/9","http://www.openwall.com/lists/oss-security/2023/10/18/4","http://www.openwall.com/lists/oss-security/2023/10/18/8","http://www.openwall.com/lists/oss-security/2023/10/19/6","http://www.openwall.com/lists/oss-security/2023/10/20/8","https://access.redhat.com/security/cve/cve-2023-44487","https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/","https://aws.amazon.com/security/security-bulletins/AWS-2023-011/","https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/","https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/","https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack","https://blog.vespa.ai/cve-2023-44487/","https://bugzilla.proxmox.com/show_bug.cgi?id=4988","https://bugzilla.redhat.com/show_bug.cgi?id=2242803","https://bugzilla.suse.com/show_bug.cgi?id=1216123","https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9","https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/","https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack","https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125","https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715","https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve","https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764","https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088","https://github.com/Azure/AKS/issues/3947","https://github.com/Kong/kong/discussions/11741","https://github.com/advisories/GHSA-qppj-fm5r-hxr3","https://github.com/advisories/GHSA-vx74-f528-fxqg","https://github.com/advisories/GHSA-xpw8-rcwv-8f8p","https://github.com/akka/akka-http/issues/4323","https://github.com/alibaba/tengine/issues/1872","https://github.com/apache/apisix/issues/10320","https://github.com/apache/httpd-site/pull/10","https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113","https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2","https://github.com/apache/trafficserver/pull/10564","https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/caddyserver/caddy/issues/5877","https://github.com/caddyserver/caddy/releases/tag/v2.7.5","https://github.com/dotnet/announcements/issues/277","https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73","https://github.com/eclipse/jetty.project/issues/10679","https://github.com/envoyproxy/envoy/pull/30055","https://github.com/etcd-io/etcd/issues/16740","https://github.com/facebook/proxygen/pull/466","https://github.com/golang/go/issues/63417","https://github.com/grpc/grpc-go/pull/6703","https://github.com/grpc/grpc/releases/tag/v1.59.2","https://github.com/h2o/h2o/pull/3291","https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf","https://github.com/haproxy/haproxy/issues/2312","https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244","https://github.com/junkurihara/rust-rpxy/issues/97","https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1","https://github.com/kazu-yamamoto/http2/issues/93","https://github.com/kubernetes/kubernetes/pull/121120","https://github.com/line/armeria/pull/5232","https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632","https://github.com/micrictor/http2-rst-stream","https://github.com/microsoft/CBL-Mariner/pull/6381","https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61","https://github.com/nghttp2/nghttp2/pull/1961","https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0","https://github.com/ninenines/cowboy/issues/1615","https://github.com/nodejs/node/pull/50121","https://github.com/openresty/openresty/issues/930","https://github.com/opensearch-project/data-prepper/issues/3474","https://github.com/oqtane/oqtane.framework/discussions/3367","https://github.com/projectcontour/contour/pull/5826","https://github.com/tempesta-tech/tempesta/issues/1986","https://github.com/varnishcache/varnish-cache/issues/3996","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo","https://istio.io/latest/news/security/istio-security-2023-004/","https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/","https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html","https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html","https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/","https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html","https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html","https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html","https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487","https://my.f5.com/manage/s/article/K000137106","https://netty.io/news/2023/10/10/4-1-100-Final.html","https://news.ycombinator.com/item?id=37830987","https://news.ycombinator.com/item?id=37830998","https://news.ycombinator.com/item?id=37831062","https://news.ycombinator.com/item?id=37837043","https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/","https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected","https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20231016-0001/","https://security.netapp.com/advisory/ntap-20240426-0007/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://security.netapp.com/advisory/ntap-20240621-0007/","https://security.paloaltonetworks.com/CVE-2023-44487","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14","https://ubuntu.com/security/CVE-2023-44487","https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/","https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522","https://www.debian.org/security/2023/dsa-5540","https://www.debian.org/security/2023/dsa-5549","https://www.debian.org/security/2023/dsa-5558","https://www.debian.org/security/2023/dsa-5570","https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487","https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/","https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","https://www.openwall.com/lists/oss-security/2023/10/10/6","https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack","https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/","http://www.openwall.com/lists/oss-security/2025/08/13/6","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/","https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-784301.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487","https://github.com/envoyproxy/envoy/security/advisories/GHSA-jhv4-f7mr-xx76","https://github.com/kubernetes/ingress-nginx/blob/4b5c5efe2508dc915a48c54de7f23912ff2ec695/changelog/controller-1.9.3.md?plain=1#L15","https://varnish-cache.org/releases/rel6.0.12.html#rel6-0-12","https://varnish-cache.org/releases/rel7.3.1.html#rel7-3-1","https://varnish-cache.org/releases/rel7.4.2.html#rel7-4-2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","description":"The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","knownExploited":[{"cve":"CVE-2023-44487","cwes":["CWE-400"],"urls":["https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://nvd.nist.gov/vuln/detail/CVE-2023-44487"],"notes":"This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","dueDate":"2023-10-31","product":"HTTP/2","dateAdded":"2023-10-10","vendorProject":"IETF","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"23e2e3b7c0b30450","cpes":["cpe:2.3:a:org.eclipse.jetty.http2:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.http2:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.http2:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-common:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-common:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_common:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_common:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-common:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_common:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2:10.0.15:*:*:*:*:*:*:*"],"name":"http2-common","purl":"pkg:maven/org.eclipse.jetty.http2/http2-common@10.0.15","type":"java-archive","version":"10.0.15","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jetty.http2","virtualPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar:org.eclipse.jetty.http2:http2-common","manifestName":"","pomArtifactID":"http2-common","archiveDigests":null},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"10.0.17"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qppj-fm5r-hxr3","versionConstraint":">=10.0.0,<10.0.17 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jetty.http2:http2-common","version":"10.0.15"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-qppj-fm5r-hxr3","fix":{"state":"fixed","versions":["10.0.17"],"available":[{"date":"2024-03-05","kind":"first-observed","version":"10.0.17"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:H","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:A","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-44487","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-44487","date":"2026-10-08","epss":0.99999,"percentile":0.99998}],"risk":58.275,"urls":["https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3","https://nvd.nist.gov/vuln/detail/CVE-2023-44487","https://github.com/alibaba/tengine/issues/1872","https://github.com/caddyserver/caddy/issues/5877","https://github.com/eclipse/jetty.project/issues/10679","https://github.com/haproxy/haproxy/issues/2312","https://github.com/hyperium/hyper/issues/3337","https://github.com/envoyproxy/envoy/pull/30055","https://github.com/grpc/grpc-go/pull/6703","https://github.com/nghttp2/nghttp2/pull/1961","https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61","https://bugzilla.proxmox.com/show_bug.cgi?id=4988","https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9","https://chaos.social/@icing/111210915918780532","https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack","https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764","https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244","https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0","https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html","https://my.f5.com/manage/s/article/K000137106","https://news.ycombinator.com/item?id=37830987","https://news.ycombinator.com/item?id=37830998","https://news.ycombinator.com/item?id=37831062","https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack","https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf","https://github.com/dotnet/announcements/issues/277","https://github.com/golang/go/issues/63417","https://github.com/apache/trafficserver/pull/10564","https://github.com/facebook/proxygen/pull/466","https://github.com/h2o/h2o/pull/3291","https://github.com/microsoft/CBL-Mariner/pull/6381","https://github.com/nodejs/node/pull/50121","https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve","https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088","https://github.com/advisories/GHSA-vx74-f528-fxqg","https://github.com/micrictor/http2-rst-stream","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo","https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487","https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14","https://www.openwall.com/lists/oss-security/2023/10/10/6","https://github.com/opensearch-project/data-prepper/issues/3474","https://github.com/kubernetes/kubernetes/pull/121120","https://github.com/advisories/GHSA-xpw8-rcwv-8f8p","https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73","https://github.com/oqtane/oqtane.framework/discussions/3367","https://netty.io/news/2023/10/10/4-1-100-Final.html","https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487","https://github.com/Azure/AKS/issues/3947","https://github.com/akka/akka-http/issues/4323","https://github.com/apache/apisix/issues/10320","https://github.com/etcd-io/etcd/issues/16740","https://github.com/junkurihara/rust-rpxy/issues/97","https://github.com/kazu-yamamoto/http2/issues/93","https://github.com/ninenines/cowboy/issues/1615","https://github.com/openresty/openresty/issues/930","https://github.com/tempesta-tech/tempesta/issues/1986","https://github.com/varnishcache/varnish-cache/issues/3996","https://github.com/apache/httpd-site/pull/10","https://github.com/line/armeria/pull/5232","https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632","https://github.com/projectcontour/contour/pull/5826","https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1","https://access.redhat.com/security/cve/cve-2023-44487","https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack","https://bugzilla.redhat.com/show_bug.cgi?id=2242803","https://bugzilla.suse.com/show_bug.cgi?id=1216123","https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125","https://github.com/Kong/kong/discussions/11741","https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113","https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487","https://github.com/caddyserver/caddy/releases/tag/v2.7.5","https://go.dev/cl/534215","https://go.dev/cl/534235","https://go.dev/issue/63417","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html","https://news.ycombinator.com/item?id=37837043","https://security.paloaltonetworks.com/CVE-2023-44487","https://ubuntu.com/security/CVE-2023-44487","https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522","http://www.openwall.com/lists/oss-security/2023/10/13/4","http://www.openwall.com/lists/oss-security/2023/10/13/9","https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html","https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html","https://github.com/grpc/grpc-go/releases","https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html","https://www.debian.org/security/2023/dsa-5540","http://www.openwall.com/lists/oss-security/2023/10/18/4","http://www.openwall.com/lists/oss-security/2023/10/18/8","http://www.openwall.com/lists/oss-security/2023/10/19/6","http://www.openwall.com/lists/oss-security/2023/10/20/8","https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715","https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html","https://www.debian.org/security/2023/dsa-5549","https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html","https://security.gentoo.org/glsa/202311-09","https://www.debian.org/security/2023/dsa-5558","https://www.debian.org/security/2023/dsa-5570","https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12","https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94","https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81","https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size","https://aws.amazon.com/security/security-bulletins/AWS-2023-011","https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack","https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack","https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty","https://blog.vespa.ai/cve-2023-44487","https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps","https://istio.io/latest/news/security/istio-security-2023-004","https://linkerd.io/2023/10/12/linkerd-cve-2023-44487","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4","https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2","https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response","https://security.netapp.com/advisory/ntap-20231016-0001","https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records","https://www.eclipse.org/lists/jetty-announce/msg00181.html","https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487","https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products","https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday","https://github.com/akka/akka-http/pull/4325","https://github.com/akka/akka-http/pull/4324","https://akka.io/security/akka-http-cve-2023-44487.html","https://security.netapp.com/advisory/ntap-20240426-0007","https://security.netapp.com/advisory/ntap-20240621-0006","https://security.netapp.com/advisory/ntap-20240621-0007","https://github.com/apache/tomcat/commit/944332bb15bd2f3bf76ec2caeb1ff0a58a3bc628","https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX","https://github.com/grpc/grpc/releases/tag/v1.59.2","http://www.openwall.com/lists/oss-security/2023/10/10/6","http://www.openwall.com/lists/oss-security/2023/10/10/7","https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-784301.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","http://www.openwall.com/lists/oss-security/2025/08/13/6"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qppj-fm5r-hxr3","description":"HTTP/2 Stream Cancellation Attack","knownExploited":[{"cve":"CVE-2023-44487","cwes":["CWE-400"],"urls":["https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://nvd.nist.gov/vuln/detail/CVE-2023-44487"],"notes":"This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","dueDate":"2023-10-31","product":"HTTP/2","dateAdded":"2023-10-10","vendorProject":"IETF","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2023-44487","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-44487","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-44487","date":"2026-10-08","epss":0.99999,"percentile":0.99998}],"urls":["http://www.openwall.com/lists/oss-security/2023/10/10/6","http://www.openwall.com/lists/oss-security/2023/10/10/7","http://www.openwall.com/lists/oss-security/2023/10/13/4","http://www.openwall.com/lists/oss-security/2023/10/13/9","http://www.openwall.com/lists/oss-security/2023/10/18/4","http://www.openwall.com/lists/oss-security/2023/10/18/8","http://www.openwall.com/lists/oss-security/2023/10/19/6","http://www.openwall.com/lists/oss-security/2023/10/20/8","https://access.redhat.com/security/cve/cve-2023-44487","https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/","https://aws.amazon.com/security/security-bulletins/AWS-2023-011/","https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/","https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/","https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack","https://blog.vespa.ai/cve-2023-44487/","https://bugzilla.proxmox.com/show_bug.cgi?id=4988","https://bugzilla.redhat.com/show_bug.cgi?id=2242803","https://bugzilla.suse.com/show_bug.cgi?id=1216123","https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9","https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/","https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack","https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125","https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715","https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve","https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764","https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088","https://github.com/Azure/AKS/issues/3947","https://github.com/Kong/kong/discussions/11741","https://github.com/advisories/GHSA-qppj-fm5r-hxr3","https://github.com/advisories/GHSA-vx74-f528-fxqg","https://github.com/advisories/GHSA-xpw8-rcwv-8f8p","https://github.com/akka/akka-http/issues/4323","https://github.com/alibaba/tengine/issues/1872","https://github.com/apache/apisix/issues/10320","https://github.com/apache/httpd-site/pull/10","https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113","https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2","https://github.com/apache/trafficserver/pull/10564","https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/caddyserver/caddy/issues/5877","https://github.com/caddyserver/caddy/releases/tag/v2.7.5","https://github.com/dotnet/announcements/issues/277","https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73","https://github.com/eclipse/jetty.project/issues/10679","https://github.com/envoyproxy/envoy/pull/30055","https://github.com/etcd-io/etcd/issues/16740","https://github.com/facebook/proxygen/pull/466","https://github.com/golang/go/issues/63417","https://github.com/grpc/grpc-go/pull/6703","https://github.com/grpc/grpc/releases/tag/v1.59.2","https://github.com/h2o/h2o/pull/3291","https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf","https://github.com/haproxy/haproxy/issues/2312","https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244","https://github.com/junkurihara/rust-rpxy/issues/97","https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1","https://github.com/kazu-yamamoto/http2/issues/93","https://github.com/kubernetes/kubernetes/pull/121120","https://github.com/line/armeria/pull/5232","https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632","https://github.com/micrictor/http2-rst-stream","https://github.com/microsoft/CBL-Mariner/pull/6381","https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61","https://github.com/nghttp2/nghttp2/pull/1961","https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0","https://github.com/ninenines/cowboy/issues/1615","https://github.com/nodejs/node/pull/50121","https://github.com/openresty/openresty/issues/930","https://github.com/opensearch-project/data-prepper/issues/3474","https://github.com/oqtane/oqtane.framework/discussions/3367","https://github.com/projectcontour/contour/pull/5826","https://github.com/tempesta-tech/tempesta/issues/1986","https://github.com/varnishcache/varnish-cache/issues/3996","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo","https://istio.io/latest/news/security/istio-security-2023-004/","https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/","https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html","https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html","https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/","https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html","https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html","https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html","https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487","https://my.f5.com/manage/s/article/K000137106","https://netty.io/news/2023/10/10/4-1-100-Final.html","https://news.ycombinator.com/item?id=37830987","https://news.ycombinator.com/item?id=37830998","https://news.ycombinator.com/item?id=37831062","https://news.ycombinator.com/item?id=37837043","https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/","https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected","https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20231016-0001/","https://security.netapp.com/advisory/ntap-20240426-0007/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://security.netapp.com/advisory/ntap-20240621-0007/","https://security.paloaltonetworks.com/CVE-2023-44487","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14","https://ubuntu.com/security/CVE-2023-44487","https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/","https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522","https://www.debian.org/security/2023/dsa-5540","https://www.debian.org/security/2023/dsa-5549","https://www.debian.org/security/2023/dsa-5558","https://www.debian.org/security/2023/dsa-5570","https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487","https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/","https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","https://www.openwall.com/lists/oss-security/2023/10/10/6","https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack","https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/","http://www.openwall.com/lists/oss-security/2025/08/13/6","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/","https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-784301.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487","https://github.com/envoyproxy/envoy/security/advisories/GHSA-jhv4-f7mr-xx76","https://github.com/kubernetes/ingress-nginx/blob/4b5c5efe2508dc915a48c54de7f23912ff2ec695/changelog/controller-1.9.3.md?plain=1#L15","https://varnish-cache.org/releases/rel6.0.12.html#rel6-0-12","https://varnish-cache.org/releases/rel7.3.1.html#rel7-3-1","https://varnish-cache.org/releases/rel7.4.2.html#rel7-4-2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","description":"The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","knownExploited":[{"cve":"CVE-2023-44487","cwes":["CWE-400"],"urls":["https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://nvd.nist.gov/vuln/detail/CVE-2023-44487"],"notes":"This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","dueDate":"2023-10-31","product":"HTTP/2","dateAdded":"2023-10-10","vendorProject":"IETF","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"746aa2a5b0578f9b","cpes":["cpe:2.3:a:org.eclipse.jetty.http2:http2-server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.http2:http2_server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.http2:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-server:http2-server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-server:http2_server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_server:http2-server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_server:http2_server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2-server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2_server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-server:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2-server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2_server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_server:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2-server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2_server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2:10.0.15:*:*:*:*:*:*:*"],"name":"http2-server","purl":"pkg:maven/org.eclipse.jetty.http2/http2-server@10.0.15","type":"java-archive","version":"10.0.15","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jetty.http2","virtualPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar:org.eclipse.jetty.http2:http2-server","manifestName":"","pomArtifactID":"http2-server","archiveDigests":null},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"10.0.17"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qppj-fm5r-hxr3","versionConstraint":">=10.0.0,<10.0.17 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jetty.http2:http2-server","version":"10.0.15"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-qppj-fm5r-hxr3","fix":{"state":"fixed","versions":["10.0.17"],"available":[{"date":"2024-03-05","kind":"first-observed","version":"10.0.17"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:H","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:A","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-44487","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-44487","date":"2026-10-08","epss":0.99999,"percentile":0.99998}],"risk":58.275,"urls":["https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3","https://nvd.nist.gov/vuln/detail/CVE-2023-44487","https://github.com/alibaba/tengine/issues/1872","https://github.com/caddyserver/caddy/issues/5877","https://github.com/eclipse/jetty.project/issues/10679","https://github.com/haproxy/haproxy/issues/2312","https://github.com/hyperium/hyper/issues/3337","https://github.com/envoyproxy/envoy/pull/30055","https://github.com/grpc/grpc-go/pull/6703","https://github.com/nghttp2/nghttp2/pull/1961","https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61","https://bugzilla.proxmox.com/show_bug.cgi?id=4988","https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9","https://chaos.social/@icing/111210915918780532","https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack","https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764","https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244","https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0","https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html","https://my.f5.com/manage/s/article/K000137106","https://news.ycombinator.com/item?id=37830987","https://news.ycombinator.com/item?id=37830998","https://news.ycombinator.com/item?id=37831062","https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack","https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf","https://github.com/dotnet/announcements/issues/277","https://github.com/golang/go/issues/63417","https://github.com/apache/trafficserver/pull/10564","https://github.com/facebook/proxygen/pull/466","https://github.com/h2o/h2o/pull/3291","https://github.com/microsoft/CBL-Mariner/pull/6381","https://github.com/nodejs/node/pull/50121","https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve","https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088","https://github.com/advisories/GHSA-vx74-f528-fxqg","https://github.com/micrictor/http2-rst-stream","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo","https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487","https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14","https://www.openwall.com/lists/oss-security/2023/10/10/6","https://github.com/opensearch-project/data-prepper/issues/3474","https://github.com/kubernetes/kubernetes/pull/121120","https://github.com/advisories/GHSA-xpw8-rcwv-8f8p","https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73","https://github.com/oqtane/oqtane.framework/discussions/3367","https://netty.io/news/2023/10/10/4-1-100-Final.html","https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487","https://github.com/Azure/AKS/issues/3947","https://github.com/akka/akka-http/issues/4323","https://github.com/apache/apisix/issues/10320","https://github.com/etcd-io/etcd/issues/16740","https://github.com/junkurihara/rust-rpxy/issues/97","https://github.com/kazu-yamamoto/http2/issues/93","https://github.com/ninenines/cowboy/issues/1615","https://github.com/openresty/openresty/issues/930","https://github.com/tempesta-tech/tempesta/issues/1986","https://github.com/varnishcache/varnish-cache/issues/3996","https://github.com/apache/httpd-site/pull/10","https://github.com/line/armeria/pull/5232","https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632","https://github.com/projectcontour/contour/pull/5826","https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1","https://access.redhat.com/security/cve/cve-2023-44487","https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack","https://bugzilla.redhat.com/show_bug.cgi?id=2242803","https://bugzilla.suse.com/show_bug.cgi?id=1216123","https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125","https://github.com/Kong/kong/discussions/11741","https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113","https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487","https://github.com/caddyserver/caddy/releases/tag/v2.7.5","https://go.dev/cl/534215","https://go.dev/cl/534235","https://go.dev/issue/63417","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html","https://news.ycombinator.com/item?id=37837043","https://security.paloaltonetworks.com/CVE-2023-44487","https://ubuntu.com/security/CVE-2023-44487","https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522","http://www.openwall.com/lists/oss-security/2023/10/13/4","http://www.openwall.com/lists/oss-security/2023/10/13/9","https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html","https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html","https://github.com/grpc/grpc-go/releases","https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html","https://www.debian.org/security/2023/dsa-5540","http://www.openwall.com/lists/oss-security/2023/10/18/4","http://www.openwall.com/lists/oss-security/2023/10/18/8","http://www.openwall.com/lists/oss-security/2023/10/19/6","http://www.openwall.com/lists/oss-security/2023/10/20/8","https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715","https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html","https://www.debian.org/security/2023/dsa-5549","https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html","https://security.gentoo.org/glsa/202311-09","https://www.debian.org/security/2023/dsa-5558","https://www.debian.org/security/2023/dsa-5570","https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12","https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94","https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81","https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size","https://aws.amazon.com/security/security-bulletins/AWS-2023-011","https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack","https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack","https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty","https://blog.vespa.ai/cve-2023-44487","https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps","https://istio.io/latest/news/security/istio-security-2023-004","https://linkerd.io/2023/10/12/linkerd-cve-2023-44487","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4","https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2","https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response","https://security.netapp.com/advisory/ntap-20231016-0001","https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records","https://www.eclipse.org/lists/jetty-announce/msg00181.html","https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487","https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products","https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday","https://github.com/akka/akka-http/pull/4325","https://github.com/akka/akka-http/pull/4324","https://akka.io/security/akka-http-cve-2023-44487.html","https://security.netapp.com/advisory/ntap-20240426-0007","https://security.netapp.com/advisory/ntap-20240621-0006","https://security.netapp.com/advisory/ntap-20240621-0007","https://github.com/apache/tomcat/commit/944332bb15bd2f3bf76ec2caeb1ff0a58a3bc628","https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX","https://github.com/grpc/grpc/releases/tag/v1.59.2","http://www.openwall.com/lists/oss-security/2023/10/10/6","http://www.openwall.com/lists/oss-security/2023/10/10/7","https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-784301.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","http://www.openwall.com/lists/oss-security/2025/08/13/6"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qppj-fm5r-hxr3","description":"HTTP/2 Stream Cancellation Attack","knownExploited":[{"cve":"CVE-2023-44487","cwes":["CWE-400"],"urls":["https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://nvd.nist.gov/vuln/detail/CVE-2023-44487"],"notes":"This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","dueDate":"2023-10-31","product":"HTTP/2","dateAdded":"2023-10-10","vendorProject":"IETF","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2023-44487","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-44487","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-44487","date":"2026-10-08","epss":0.99999,"percentile":0.99998}],"urls":["http://www.openwall.com/lists/oss-security/2023/10/10/6","http://www.openwall.com/lists/oss-security/2023/10/10/7","http://www.openwall.com/lists/oss-security/2023/10/13/4","http://www.openwall.com/lists/oss-security/2023/10/13/9","http://www.openwall.com/lists/oss-security/2023/10/18/4","http://www.openwall.com/lists/oss-security/2023/10/18/8","http://www.openwall.com/lists/oss-security/2023/10/19/6","http://www.openwall.com/lists/oss-security/2023/10/20/8","https://access.redhat.com/security/cve/cve-2023-44487","https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/","https://aws.amazon.com/security/security-bulletins/AWS-2023-011/","https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/","https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/","https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack","https://blog.vespa.ai/cve-2023-44487/","https://bugzilla.proxmox.com/show_bug.cgi?id=4988","https://bugzilla.redhat.com/show_bug.cgi?id=2242803","https://bugzilla.suse.com/show_bug.cgi?id=1216123","https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9","https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/","https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack","https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125","https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715","https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve","https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764","https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088","https://github.com/Azure/AKS/issues/3947","https://github.com/Kong/kong/discussions/11741","https://github.com/advisories/GHSA-qppj-fm5r-hxr3","https://github.com/advisories/GHSA-vx74-f528-fxqg","https://github.com/advisories/GHSA-xpw8-rcwv-8f8p","https://github.com/akka/akka-http/issues/4323","https://github.com/alibaba/tengine/issues/1872","https://github.com/apache/apisix/issues/10320","https://github.com/apache/httpd-site/pull/10","https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113","https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2","https://github.com/apache/trafficserver/pull/10564","https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/caddyserver/caddy/issues/5877","https://github.com/caddyserver/caddy/releases/tag/v2.7.5","https://github.com/dotnet/announcements/issues/277","https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73","https://github.com/eclipse/jetty.project/issues/10679","https://github.com/envoyproxy/envoy/pull/30055","https://github.com/etcd-io/etcd/issues/16740","https://github.com/facebook/proxygen/pull/466","https://github.com/golang/go/issues/63417","https://github.com/grpc/grpc-go/pull/6703","https://github.com/grpc/grpc/releases/tag/v1.59.2","https://github.com/h2o/h2o/pull/3291","https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf","https://github.com/haproxy/haproxy/issues/2312","https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244","https://github.com/junkurihara/rust-rpxy/issues/97","https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1","https://github.com/kazu-yamamoto/http2/issues/93","https://github.com/kubernetes/kubernetes/pull/121120","https://github.com/line/armeria/pull/5232","https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632","https://github.com/micrictor/http2-rst-stream","https://github.com/microsoft/CBL-Mariner/pull/6381","https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61","https://github.com/nghttp2/nghttp2/pull/1961","https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0","https://github.com/ninenines/cowboy/issues/1615","https://github.com/nodejs/node/pull/50121","https://github.com/openresty/openresty/issues/930","https://github.com/opensearch-project/data-prepper/issues/3474","https://github.com/oqtane/oqtane.framework/discussions/3367","https://github.com/projectcontour/contour/pull/5826","https://github.com/tempesta-tech/tempesta/issues/1986","https://github.com/varnishcache/varnish-cache/issues/3996","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo","https://istio.io/latest/news/security/istio-security-2023-004/","https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/","https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html","https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html","https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/","https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html","https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html","https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html","https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487","https://my.f5.com/manage/s/article/K000137106","https://netty.io/news/2023/10/10/4-1-100-Final.html","https://news.ycombinator.com/item?id=37830987","https://news.ycombinator.com/item?id=37830998","https://news.ycombinator.com/item?id=37831062","https://news.ycombinator.com/item?id=37837043","https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/","https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected","https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20231016-0001/","https://security.netapp.com/advisory/ntap-20240426-0007/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://security.netapp.com/advisory/ntap-20240621-0007/","https://security.paloaltonetworks.com/CVE-2023-44487","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14","https://ubuntu.com/security/CVE-2023-44487","https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/","https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522","https://www.debian.org/security/2023/dsa-5540","https://www.debian.org/security/2023/dsa-5549","https://www.debian.org/security/2023/dsa-5558","https://www.debian.org/security/2023/dsa-5570","https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487","https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/","https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","https://www.openwall.com/lists/oss-security/2023/10/10/6","https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack","https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/","http://www.openwall.com/lists/oss-security/2025/08/13/6","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/","https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-784301.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487","https://github.com/envoyproxy/envoy/security/advisories/GHSA-jhv4-f7mr-xx76","https://github.com/kubernetes/ingress-nginx/blob/4b5c5efe2508dc915a48c54de7f23912ff2ec695/changelog/controller-1.9.3.md?plain=1#L15","https://varnish-cache.org/releases/rel6.0.12.html#rel6-0-12","https://varnish-cache.org/releases/rel7.3.1.html#rel7-3-1","https://varnish-cache.org/releases/rel7.4.2.html#rel7-4-2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","description":"The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","knownExploited":[{"cve":"CVE-2023-44487","cwes":["CWE-400"],"urls":["https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://nvd.nist.gov/vuln/detail/CVE-2023-44487"],"notes":"This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","dueDate":"2023-10-31","product":"HTTP/2","dateAdded":"2023-10-10","vendorProject":"IETF","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"b1b865057b4a53ab","cpes":["cpe:2.3:a:libsystemd0:libsystemd0:247.3-7\\+deb11u2:*:*:*:*:*:*:*"],"name":"libsystemd0","purl":"pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=systemd","type":"deb","version":"247.3-7+deb11u2","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsystemd0/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libsystemd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"fix":{"suggestedVersion":"247.3-7+deb11u6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50868","versionConstraint":"< 247.3-7+deb11u6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"systemd","version":"247.3-7+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-50868","fix":{"state":"fixed","versions":["247.3-7+deb11u6"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"247.3-7+deb11u6"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50868","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-50868","date":"2026-10-08","epss":0.73725,"percentile":0.99466}],"risk":55.293749999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-50868","description":"The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations."},"relatedVulnerabilities":[{"id":"CVE-2023-50868","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50868","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-50868","date":"2026-10-08","epss":0.73725,"percentile":0.99466}],"urls":["http://www.openwall.com/lists/oss-security/2024/02/16/2","http://www.openwall.com/lists/oss-security/2024/02/16/3","https://access.redhat.com/security/cve/CVE-2023-50868","https://bugzilla.suse.com/show_bug.cgi?id=1219826","https://datatracker.ietf.org/doc/html/rfc5155","https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html","https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1","https://kb.isc.org/docs/cve-2023-50868","https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html","https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/","https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html","https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/","https://security.netapp.com/advisory/ntap-20240307-0008/","https://www.isc.org/blogs/2024-bind-security-release/","https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/","https://www.nlnetlabs.nl/downloads/unbound/CVE-2024-1931.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50868","description":"The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations."}]},{"artifact":{"id":"7eda2e8b2cc08c93","cpes":["cpe:2.3:a:libudev1:libudev1:247.3-7\\+deb11u2:*:*:*:*:*:*:*"],"name":"libudev1","purl":"pkg:deb/debian/libudev1@247.3-7%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=systemd","type":"deb","version":"247.3-7+deb11u2","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libudev1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libudev1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libudev1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libudev1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"fix":{"suggestedVersion":"247.3-7+deb11u6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50868","versionConstraint":"< 247.3-7+deb11u6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"systemd","version":"247.3-7+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-50868","fix":{"state":"fixed","versions":["247.3-7+deb11u6"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"247.3-7+deb11u6"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50868","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-50868","date":"2026-10-08","epss":0.73725,"percentile":0.99466}],"risk":55.293749999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-50868","description":"The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations."},"relatedVulnerabilities":[{"id":"CVE-2023-50868","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50868","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-50868","date":"2026-10-08","epss":0.73725,"percentile":0.99466}],"urls":["http://www.openwall.com/lists/oss-security/2024/02/16/2","http://www.openwall.com/lists/oss-security/2024/02/16/3","https://access.redhat.com/security/cve/CVE-2023-50868","https://bugzilla.suse.com/show_bug.cgi?id=1219826","https://datatracker.ietf.org/doc/html/rfc5155","https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html","https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1","https://kb.isc.org/docs/cve-2023-50868","https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html","https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/","https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html","https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/","https://security.netapp.com/advisory/ntap-20240307-0008/","https://www.isc.org/blogs/2024-bind-security-release/","https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/","https://www.nlnetlabs.nl/downloads/unbound/CVE-2024-1931.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50868","description":"The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations."}]},{"artifact":{"id":"5aa5fc0ebbc6f0c0","cpes":["cpe:2.3:a:org.jenkins-ci.main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:org.jenkins-ci.main:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins_core:2.407:*:*:*:*:*:*:*"],"name":"jenkins-core","purl":"pkg:maven/org.jenkins-ci.main/jenkins-core@2.407","type":"java-archive","version":"2.407","language":"java","licenses":["The MIT license"],"metadata":{"pomGroupID":"org.jenkins-ci.main","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","manifestName":"","pomArtifactID":"jenkins-core","archiveDigests":[{"value":"e7fc0a769dfabd6c316cde23c6bd1dd8a7c4d94b","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.426.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-53ph-2r2x-vqw8","versionConstraint":">=2.217,<=2.426.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.main:jenkins-core","version":"2.407"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-53ph-2r2x-vqw8","fix":{"state":"fixed","versions":["2.426.3"],"available":[{"date":"2024-01-30","kind":"first-observed","version":"2.426.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-23898","cwe":"CWE-346","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-23898","cwe":"CWE-346","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-23898","date":"2026-10-08","epss":0.67151,"percentile":0.99287}],"risk":54.728065,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-23898","https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3315","http://www.openwall.com/lists/oss-security/2024/01/24/6","https://github.com/jenkinsci/jenkins/commit/de450967f38398169650b55c002f1229a3fcdb1b","https://www.sonarsource.com/blog/excessive-expansion-uncovering-critical-security-vulnerabilities-in-jenkins"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-53ph-2r2x-vqw8","description":"Cross-site WebSocket hijacking vulnerability in the Jenkins CLI"},"relatedVulnerabilities":[{"id":"CVE-2024-23898","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-23898","cwe":"CWE-346","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-23898","cwe":"CWE-346","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-23898","date":"2026-10-08","epss":0.67151,"percentile":0.99287}],"urls":["http://www.openwall.com/lists/oss-security/2024/01/24/6","https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3315","https://www.sonarsource.com/blog/excessive-expansion-uncovering-critical-security-vulnerabilities-in-jenkins/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-23898","description":"Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing attackers to execute CLI commands on the Jenkins controller."}]},{"artifact":{"id":"255a953ed0498414","cpes":["cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_0:3.34.1-3:*:*:*:*:*:*:*"],"name":"libsqlite3-0","purl":"pkg:deb/debian/libsqlite3-0@3.34.1-3?arch=amd64&distro=debian-11.7&upstream=sqlite3","type":"deb","version":"3.34.1-3","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-0/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libsqlite3-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-6965","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"sqlite3","version":"3.34.1-3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-6965","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L","metrics":{"baseScore":7.7,"impactScore":5.3,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6965","cwe":"CWE-197","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2025-6965","date":"2026-10-08","epss":0.71394,"percentile":0.99401}],"risk":54.259440000000005,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-6965","description":"There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above."},"relatedVulnerabilities":[{"id":"CVE-2025-6965","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L","metrics":{"baseScore":7.7,"impactScore":5.3,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6965","cwe":"CWE-197","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2025-6965","date":"2026-10-08","epss":0.71394,"percentile":0.99401}],"urls":["https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8","http://seclists.org/fulldisclosure/2025/Sep/49","http://seclists.org/fulldisclosure/2025/Sep/53","http://seclists.org/fulldisclosure/2025/Sep/56","http://seclists.org/fulldisclosure/2025/Sep/57","http://seclists.org/fulldisclosure/2025/Sep/58","http://www.openwall.com/lists/oss-security/2025/09/06/1","https://cert-portal.siemens.com/productcert/html/ssa-225816.html","https://cert-portal.siemens.com/productcert/html/ssa-485750.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-6965","description":"There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above."}]},{"artifact":{"id":"e974360838add45f","cpes":["cpe:2.3:a:golang:crypto:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4","type":"go-module","version":"v0.0.0-20220411220226-7b82a4e95df4","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.0.0-20231218163308-9d2ee975ef9f"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-45x7-px36-x8w8","versionConstraint":"<0.0.0-20231218163308-9d2ee975ef9f (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.0.0-20220411220226-7b82a4e95df4"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-45x7-px36-x8w8","fix":{"state":"fixed","versions":["0.0.0-20231218163308-9d2ee975ef9f"],"available":[{"date":"2025-06-25","kind":"first-observed","version":"0.0.0-20231218163308-9d2ee975ef9f"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48795","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-48795","cwe":"CWE-354","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-48795","date":"2026-10-08","epss":0.93547,"percentile":0.9984}],"risk":50.983115,"urls":["https://github.com/warp-tech/russh/security/advisories/GHSA-45x7-px36-x8w8","https://nvd.nist.gov/vuln/detail/CVE-2023-48795","https://github.com/paramiko/paramiko/issues/2337","https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0","https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d","https://github.com/warp-tech/russh/commit/1aa340a7df1d5be1c0f4a9e247aade76dfdd2951","https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42","https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25","https://github.com/openssh/openssh-portable/commits/master","https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst","https://github.com/ronf/asyncssh/tags","https://github.com/warp-tech/russh/releases/tag/v0.40.2","https://gitlab.com/libssh/libssh-mirror/-/tags","https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ","https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg","https://matt.ucc.asn.au/dropbear/CHANGES","https://news.ycombinator.com/item?id=38684904","https://news.ycombinator.com/item?id=38685286","https://twitter.com/TrueSkrillor/status/1736774389725565005","https://www.bitvise.com/ssh-server-version-history","https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html","https://www.openssh.com/openbsd.html","https://www.openssh.com/txt/release-9.6","https://www.openwall.com/lists/oss-security/2023/12/18/2","https://www.terrapin-attack.com","http://www.openwall.com/lists/oss-security/2023/12/18/3","https://github.com/mwiede/jsch/issues/457","https://github.com/mwiede/jsch/pull/461","https://access.redhat.com/security/cve/cve-2023-48795","https://bugs.gentoo.org/920280","https://bugzilla.redhat.com/show_bug.cgi?id=2254210","https://bugzilla.suse.com/show_bug.cgi?id=1217950","https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6","https://github.com/drakkan/sftpgo/releases/tag/v2.5.6","https://github.com/erlang/otp/releases/tag/OTP-26.2.1","https://go.dev/cl/550715","https://go.dev/issue/64784","https://security-tracker.debian.org/tracker/CVE-2023-48795","https://security-tracker.debian.org/tracker/source-package/libssh2","https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg","https://ubuntu.com/security/CVE-2023-48795","https://github.com/libssh2/libssh2/pull/1291","https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5","https://forum.netgate.com/topic/184941/terrapin-ssh-attack","https://github.com/rapier1/hpn-ssh/releases","https://github.com/proftpd/proftpd/issues/456","https://github.com/NixOS/nixpkgs/pull/275249","https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab","https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3","https://crates.io/crates/thrussh/versions","https://github.com/TeraTermProject/teraterm/releases/tag/v5.1","https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22","https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15","https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES","https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC","https://oryx-embedded.com/download/#changelog","https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update","https://www.paramiko.org/changelog.html","https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc","http://www.openwall.com/lists/oss-security/2023/12/19/5","http://www.openwall.com/lists/oss-security/2023/12/20/3","https://github.com/apache/mina-sshd/issues/445","https://github.com/hierynomus/sshj/issues/916","https://github.com/janmojzis/tinyssh/issues/81","https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16","https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES","https://security-tracker.debian.org/tracker/source-package/trilead-ssh2","https://www.openwall.com/lists/oss-security/2023/12/20/3","http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html","https://github.com/PowerShell/Win32-OpenSSH/issues/2189","https://github.com/cyd01/KiTTY/issues/520","https://github.com/ssh-mitm/ssh-mitm/issues/165","https://filezilla-project.org/versions.php","https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta","https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html","https://news.ycombinator.com/item?id=38732005","https://nova.app/releases/#v11.8","https://roumenpetrov.info/secsh/#news20231220","https://security.gentoo.org/glsa/202312-16","https://security.gentoo.org/glsa/202312-17","https://winscp.net/eng/docs/history#6.2.2","https://www.bitvise.com/ssh-client-version-history#933","https://www.debian.org/security/2023/dsa-5586","https://www.debian.org/security/2023/dsa-5588","https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508","https://www.theregister.com/2023/12/20/terrapin_attack_ssh","https://www.vandyke.com/products/securecrt/history.txt","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002","https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html","https://github.com/paramiko/paramiko/issues/2337#issuecomment-1887642773","https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack","https://help.panic.com/releasenotes/transmit5","https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7","https://security.netapp.com/advisory/ntap-20240105-0004","https://support.apple.com/kb/HT214084","https://thorntech.com/cve-2023-48795-and-sftp-gateway","https://www.netsarang.com/en/xshell-update-history","https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed","https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795","http://seclists.org/fulldisclosure/2024/Mar/21","https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html","http://www.openwall.com/lists/oss-security/2024/03/06/3","http://www.openwall.com/lists/oss-security/2024/04/17/8","https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit","https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html","https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-45x7-px36-x8w8","description":"Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin"},"relatedVulnerabilities":[{"id":"CVE-2023-48795","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48795","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-48795","cwe":"CWE-354","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-48795","date":"2026-10-08","epss":0.93547,"percentile":0.9984}],"urls":["http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html","http://seclists.org/fulldisclosure/2024/Mar/21","http://www.openwall.com/lists/oss-security/2023/12/18/3","http://www.openwall.com/lists/oss-security/2023/12/19/5","http://www.openwall.com/lists/oss-security/2023/12/20/3","http://www.openwall.com/lists/oss-security/2024/03/06/3","http://www.openwall.com/lists/oss-security/2024/04/17/8","https://access.redhat.com/security/cve/cve-2023-48795","https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/","https://bugs.gentoo.org/920280","https://bugzilla.redhat.com/show_bug.cgi?id=2254210","https://bugzilla.suse.com/show_bug.cgi?id=1217950","https://crates.io/crates/thrussh/versions","https://filezilla-project.org/versions.php","https://forum.netgate.com/topic/184941/terrapin-ssh-attack","https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6","https://github.com/NixOS/nixpkgs/pull/275249","https://github.com/PowerShell/Win32-OpenSSH/issues/2189","https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta","https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0","https://github.com/TeraTermProject/teraterm/releases/tag/v5.1","https://github.com/advisories/GHSA-45x7-px36-x8w8","https://github.com/apache/mina-sshd/issues/445","https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab","https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22","https://github.com/cyd01/KiTTY/issues/520","https://github.com/drakkan/sftpgo/releases/tag/v2.5.6","https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42","https://github.com/erlang/otp/releases/tag/OTP-26.2.1","https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d","https://github.com/hierynomus/sshj/issues/916","https://github.com/janmojzis/tinyssh/issues/81","https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5","https://github.com/libssh2/libssh2/pull/1291","https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25","https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3","https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15","https://github.com/mwiede/jsch/issues/457","https://github.com/mwiede/jsch/pull/461","https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16","https://github.com/openssh/openssh-portable/commits/master","https://github.com/paramiko/paramiko/issues/2337","https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES","https://github.com/proftpd/proftpd/issues/456","https://github.com/rapier1/hpn-ssh/releases","https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst","https://github.com/ronf/asyncssh/tags","https://github.com/ssh-mitm/ssh-mitm/issues/165","https://github.com/warp-tech/russh/releases/tag/v0.40.2","https://gitlab.com/libssh/libssh-mirror/-/tags","https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ","https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg","https://help.panic.com/releasenotes/transmit5/","https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/","https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html","https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/","https://matt.ucc.asn.au/dropbear/CHANGES","https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC","https://news.ycombinator.com/item?id=38684904","https://news.ycombinator.com/item?id=38685286","https://news.ycombinator.com/item?id=38732005","https://nova.app/releases/#v11.8","https://oryx-embedded.com/download/#changelog","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002","https://roumenpetrov.info/secsh/#news20231220","https://security-tracker.debian.org/tracker/CVE-2023-48795","https://security-tracker.debian.org/tracker/source-package/libssh2","https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg","https://security-tracker.debian.org/tracker/source-package/trilead-ssh2","https://security.gentoo.org/glsa/202312-16","https://security.gentoo.org/glsa/202312-17","https://security.netapp.com/advisory/ntap-20240105-0004/","https://support.apple.com/kb/HT214084","https://thorntech.com/cve-2023-48795-and-sftp-gateway/","https://twitter.com/TrueSkrillor/status/1736774389725565005","https://ubuntu.com/security/CVE-2023-48795","https://winscp.net/eng/docs/history#6.2.2","https://www.bitvise.com/ssh-client-version-history#933","https://www.bitvise.com/ssh-server-version-history","https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html","https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update","https://www.debian.org/security/2023/dsa-5586","https://www.debian.org/security/2023/dsa-5588","https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc","https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508","https://www.netsarang.com/en/xshell-update-history/","https://www.openssh.com/openbsd.html","https://www.openssh.com/txt/release-9.6","https://www.openwall.com/lists/oss-security/2023/12/18/2","https://www.openwall.com/lists/oss-security/2023/12/20/3","https://www.paramiko.org/changelog.html","https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/","https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/","https://www.terrapin-attack.com","https://www.theregister.com/2023/12/20/terrapin_attack_ssh","https://www.vandyke.com/products/securecrt/history.txt","https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/","https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit","https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-48795","description":"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust."}]},{"artifact":{"id":"c103c066c49ae324","cpes":["cpe:2.3:a:golang:networking:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2","type":"go-module","version":"v0.0.0-20211112202133-69e39bad7dc2","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.23.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4v7x-pqxf-cx7m","versionConstraint":"<0.23.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.0.0-20211112202133-69e39bad7dc2"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-4v7x-pqxf-cx7m","fix":{"state":"fixed","versions":["0.23.0"],"available":[{"date":"2024-04-20","kind":"first-observed","version":"0.23.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-45288","date":"2026-10-08","epss":0.91969,"percentile":0.99819}],"risk":47.364035,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-45288","https://go.dev/cl/576155","https://go.dev/issue/65051","https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M","https://pkg.go.dev/vuln/GO-2024-2687","https://nowotarski.info/http2-continuation-flood-technical-details","https://security.netapp.com/advisory/ntap-20240419-0009","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT","http://www.openwall.com/lists/oss-security/2024/04/03/16","http://www.openwall.com/lists/oss-security/2024/04/05/4","https://www.kb.cert.org/vuls/id/421644"],"severity":"Medium","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4v7x-pqxf-cx7m","description":"net/http, x/net/http2: close connections when receiving too many headers"},"relatedVulnerabilities":[{"id":"CVE-2023-45288","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-45288","date":"2026-10-08","epss":0.91969,"percentile":0.99819}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/03/16","http://www.openwall.com/lists/oss-security/2024/04/05/4","https://go.dev/cl/576155","https://go.dev/issue/65051","https://groups.google.com/g/golang-announce/c/YgW0sx8mN3M","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QRYFHIQ6XRKRYBI2F5UESH67BJBQXUPT/","https://pkg.go.dev/vuln/GO-2024-2687","https://security.netapp.com/advisory/ntap-20240419-0009/","https://www.kb.cert.org/vuls/id/421644"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-45288","description":"An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection."}]},{"artifact":{"id":"b14b9dda81b19a08","cpes":["cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2-14:libnghttp2_14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2_14:libnghttp2-14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2_14:libnghttp2_14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2:libnghttp2-14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2:libnghttp2_14:1.43.0-1:*:*:*:*:*:*:*"],"name":"libnghttp2-14","purl":"pkg:deb/debian/libnghttp2-14@1.43.0-1?arch=amd64&distro=debian-11.7&upstream=nghttp2","type":"deb","version":"1.43.0-1","language":"","licenses":["BSD-2-clause","Expat","GPL-3","GPL-3+","MIT","SIL-OFL-1.1","all-permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libnghttp2-14/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libnghttp2-14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libnghttp2-14:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libnghttp2-14:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"nghttp2"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.43.0-1+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28182","versionConstraint":"< 1.43.0-1+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"nghttp2","version":"1.43.0-1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-28182","fix":{"state":"fixed","versions":["1.43.0-1+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.43.0-1+deb11u2"}]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28182","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-28182","date":"2026-10-08","epss":0.8496,"percentile":0.99708}],"risk":43.754400000000004,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-28182","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability."},"relatedVulnerabilities":[{"id":"CVE-2024-28182","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28182","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-28182","date":"2026-10-08","epss":0.8496,"percentile":0.99708}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/03/16","https://github.com/nghttp2/nghttp2/commit/00201ecd8f982da3b67d4f6868af72a1b03b14e0","https://github.com/nghttp2/nghttp2/commit/d71a4668c6bead55805d18810d633fbb98315af9","https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q","https://lists.debian.org/debian-lts-announce/2024/04/msg00026.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGOME6ZXJG7664IPQNVE3DL67E3YP3HY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J6ZMXUGB66VAXDW5J6QSTHM5ET25FGSA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXJO2EASHM2OQQLGVDY5ZSO7UVDVHTDK/","https://lists.debian.org/debian-lts-announce/2024/09/msg00041.html","https://www.kb.cert.org/vuls/id/421644"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28182","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1n-0+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-2650","versionConstraint":"< 1.1.1n-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-2650","fix":{"state":"fixed","versions":["1.1.1n-0+deb11u5"],"available":[{"date":"2023-05-31","kind":"advisory","version":"1.1.1n-0+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2650","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-2650","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-2650","date":"2026-10-08","epss":0.75116,"percentile":0.995}],"risk":43.1917,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5417-1","link":"https://security-tracker.debian.org/tracker/DSA-5417-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-2650","description":"Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow.  Impact summary: Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience notable to very long delays when processing those messages, which may lead to a Denial of Service.  An OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers - most of which have no size limit.  OBJ_obj2txt() may be used to translate an ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL type ASN1_OBJECT) to its canonical numeric text form, which are the sub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by periods.  When one of the sub-identifiers in the OBJECT IDENTIFIER is very large (these are sizes that are seen as absurdly large, taking up tens or hundreds of KiBs), the translation to a decimal number in text may take a very long time.  The time complexity is O(n^2) with 'n' being the size of the sub-identifiers in bytes (*).  With OpenSSL 3.0, support to fetch cryptographic algorithms using names / identifiers in string form was introduced.  This includes using OBJECT IDENTIFIERs in canonical numeric text form as identifiers for fetching algorithms.  Such OBJECT IDENTIFIERs may be received through the ASN.1 structure AlgorithmIdentifier, which is commonly used in multiple protocols to specify what cryptographic algorithm should be used to sign or verify, encrypt or decrypt, or digest passed data.  Applications that call OBJ_obj2txt() directly with untrusted data are affected, with any version of OpenSSL.  If the use is for the mere purpose of display, the severity is considered low.  In OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS.  It also impacts anything that processes X.509 certificates, including simple things like verifying its signature.  The impact on TLS is relatively low, because all versions of OpenSSL have a 100KiB limit on the peer's certificate chain.  Additionally, this only impacts clients, or servers that have explicitly enabled client authentication.  In OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects, such as X.509 certificates.  This is assumed to not happen in such a way that it would cause a Denial of Service, so these versions are considered not affected by this issue in such a way that it would be cause for concern, and the severity is therefore considered low."},"relatedVulnerabilities":[{"id":"CVE-2023-2650","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2650","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-2650","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-2650","date":"2026-10-08","epss":0.75116,"percentile":0.995}],"urls":["http://www.openwall.com/lists/oss-security/2023/05/30/1","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230703-0001/","https://security.netapp.com/advisory/ntap-20231027-0009/","https://www.debian.org/security/2023/dsa-5417","https://www.openssl.org/news/secadv/20230530.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-2650","description":"Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1n-0+deb11u5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-2650","versionConstraint":"< 1.1.1n-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-2650","fix":{"state":"fixed","versions":["1.1.1n-0+deb11u5"],"available":[{"date":"2023-05-31","kind":"advisory","version":"1.1.1n-0+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2650","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-2650","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-2650","date":"2026-10-08","epss":0.75116,"percentile":0.995}],"risk":43.1917,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5417-1","link":"https://security-tracker.debian.org/tracker/DSA-5417-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-2650","description":"Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow.  Impact summary: Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience notable to very long delays when processing those messages, which may lead to a Denial of Service.  An OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers - most of which have no size limit.  OBJ_obj2txt() may be used to translate an ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL type ASN1_OBJECT) to its canonical numeric text form, which are the sub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by periods.  When one of the sub-identifiers in the OBJECT IDENTIFIER is very large (these are sizes that are seen as absurdly large, taking up tens or hundreds of KiBs), the translation to a decimal number in text may take a very long time.  The time complexity is O(n^2) with 'n' being the size of the sub-identifiers in bytes (*).  With OpenSSL 3.0, support to fetch cryptographic algorithms using names / identifiers in string form was introduced.  This includes using OBJECT IDENTIFIERs in canonical numeric text form as identifiers for fetching algorithms.  Such OBJECT IDENTIFIERs may be received through the ASN.1 structure AlgorithmIdentifier, which is commonly used in multiple protocols to specify what cryptographic algorithm should be used to sign or verify, encrypt or decrypt, or digest passed data.  Applications that call OBJ_obj2txt() directly with untrusted data are affected, with any version of OpenSSL.  If the use is for the mere purpose of display, the severity is considered low.  In OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS.  It also impacts anything that processes X.509 certificates, including simple things like verifying its signature.  The impact on TLS is relatively low, because all versions of OpenSSL have a 100KiB limit on the peer's certificate chain.  Additionally, this only impacts clients, or servers that have explicitly enabled client authentication.  In OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects, such as X.509 certificates.  This is assumed to not happen in such a way that it would cause a Denial of Service, so these versions are considered not affected by this issue in such a way that it would be cause for concern, and the severity is therefore considered low."},"relatedVulnerabilities":[{"id":"CVE-2023-2650","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2650","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-2650","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-2650","date":"2026-10-08","epss":0.75116,"percentile":0.995}],"urls":["http://www.openwall.com/lists/oss-security/2023/05/30/1","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230703-0001/","https://security.netapp.com/advisory/ntap-20231027-0009/","https://www.debian.org/security/2023/dsa-5417","https://www.openssl.org/news/secadv/20230530.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-2650","description":"Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low."}]},{"artifact":{"id":"1dc1db38c4328638","cpes":["cpe:2.3:a:libdb5.3:libdb5.3:5.3.28\\+dfsg1-0.8:*:*:*:*:*:*:*"],"name":"libdb5.3","purl":"pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg1-0.8?arch=amd64&distro=debian-11.7&upstream=db5.3","type":"deb","version":"5.3.28+dfsg1-0.8","language":"","licenses":["sha256:b3bbc6fbb3f2a0e6a487e953eb8c3cc4bdb6f4150f7f51d20b1e9a3c8ef92d3d"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libdb5.3/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libdb5.3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libdb5.3:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libdb5.3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"db5.3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-8457","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"db5.3","version":"5.3.28+dfsg1-0.8"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2019-8457","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-8457","cwe":"CWE-125","type":"Secondary","source":"cve@checkpoint.com"},{"cve":"CVE-2019-8457","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-8457","date":"2026-10-08","epss":0.45426,"percentile":0.98761}],"risk":42.70044,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-8457","description":"SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables."},"relatedVulnerabilities":[{"id":"CVE-2019-8457","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-8457","cwe":"CWE-125","type":"Secondary","source":"cve@checkpoint.com"},{"cve":"CVE-2019-8457","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-8457","date":"2026-10-08","epss":0.45426,"percentile":0.98761}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00074.html","https://kc.mcafee.com/corporate/index?page=content&id=SB10365","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPKYSWCOM3CL66RI76TYVIG6TJ263RXH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJPFGA45DI4F5MCF2OAACGH3HQOF4G3M/","https://security.netapp.com/advisory/ntap-20190606-0002/","https://usn.ubuntu.com/4004-1/","https://usn.ubuntu.com/4004-2/","https://usn.ubuntu.com/4019-1/","https://usn.ubuntu.com/4019-2/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://www.sqlite.org/releaselog/3_28_0.html","https://www.sqlite.org/src/info/90acdbfce9c08858"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-8457","description":"SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables."}]},{"artifact":{"id":"b2411ec8fb88df55","cpes":["cpe:2.3:a:jenkins:script_security:1229.v4880b_b_e905a_6:*:*:*:*:jenkins:*:*"],"name":"script-security","purl":"pkg:maven/org.jenkins-ci.plugins/script-security@1229.v4880b_b_e905a_6","type":"jenkins-plugin","version":"1229.v4880b_b_e905a_6","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi","manifestName":"","pomArtifactID":"script-security","archiveDigests":[{"value":"f5a6c17576cd9f3696165cbfaa0baed021749866","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1336.vf33a"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-v63g-v339-2673","versionConstraint":"<1336.vf33a (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:script-security","version":"1229.v4880b_b_e905a_6"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-v63g-v339-2673","fix":{"state":"fixed","versions":["1336.vf33a"],"available":[{"date":"2024-05-04","kind":"first-observed","version":"1336.vf33a"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34144","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34144","date":"2026-10-08","epss":0.48081,"percentile":0.98829}],"risk":39.186015000000005,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-34144","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341","http://www.openwall.com/lists/oss-security/2024/05/02/3","https://github.com/jenkinsci/script-security-plugin/releases/tag/1336.vf33a_a_9863911"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-v63g-v339-2673","description":"Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies"},"relatedVulnerabilities":[{"id":"CVE-2024-34144","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34144","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34144","date":"2026-10-08","epss":0.48081,"percentile":0.98829}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/02/3","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34144","description":"A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM."}]},{"artifact":{"id":"c0daed3064d1154d","cpes":["cpe:2.3:a:jenkins:script_security:1229.v4880b_b_e905a_6:*:*:*:*:jenkins:*:*"],"name":"script-security","purl":"pkg:maven/org.jenkins-ci.plugins/script-security@1229.v4880b_b_e905a_6","type":"jenkins-plugin","version":"1229.v4880b_b_e905a_6","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi:WEB-INF/lib/script-security.jar","manifestName":"","pomArtifactID":"script-security","archiveDigests":[{"value":"6d8dfb75093b8b8973af431a5fb129a91ce87525","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi:WEB-INF/lib/script-security.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1336.vf33a"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-v63g-v339-2673","versionConstraint":"<1336.vf33a (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:script-security","version":"1229.v4880b_b_e905a_6"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-v63g-v339-2673","fix":{"state":"fixed","versions":["1336.vf33a"],"available":[{"date":"2024-05-04","kind":"first-observed","version":"1336.vf33a"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34144","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34144","date":"2026-10-08","epss":0.48081,"percentile":0.98829}],"risk":39.186015000000005,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-34144","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341","http://www.openwall.com/lists/oss-security/2024/05/02/3","https://github.com/jenkinsci/script-security-plugin/releases/tag/1336.vf33a_a_9863911"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-v63g-v339-2673","description":"Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies"},"relatedVulnerabilities":[{"id":"CVE-2024-34144","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34144","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34144","date":"2026-10-08","epss":0.48081,"percentile":0.98829}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/02/3","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34144","description":"A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM."}]},{"artifact":{"id":"5ed561949ce983e6","cpes":["cpe:2.3:a:jenkins:script_security:1251.vfe552ed55f8d:*:*:*:*:jenkins:*:*"],"name":"script-security","purl":"pkg:maven/org.jenkins-ci.plugins/script-security@1251.vfe552ed55f8d","type":"jenkins-plugin","version":"1251.vfe552ed55f8d","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/ref/plugins/script-security.jpi:WEB-INF/lib/script-security.jar","manifestName":"","pomArtifactID":"script-security","archiveDigests":[{"value":"6f4f72f48a7527e123dc206911afa1f7841067e6","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/script-security.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/script-security.jpi:WEB-INF/lib/script-security.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1336.vf33a"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-v63g-v339-2673","versionConstraint":"<1336.vf33a (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:script-security","version":"1251.vfe552ed55f8d"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-v63g-v339-2673","fix":{"state":"fixed","versions":["1336.vf33a"],"available":[{"date":"2024-05-04","kind":"first-observed","version":"1336.vf33a"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34144","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34144","date":"2026-10-08","epss":0.48081,"percentile":0.98829}],"risk":39.186015000000005,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-34144","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341","http://www.openwall.com/lists/oss-security/2024/05/02/3","https://github.com/jenkinsci/script-security-plugin/releases/tag/1336.vf33a_a_9863911"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-v63g-v339-2673","description":"Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies"},"relatedVulnerabilities":[{"id":"CVE-2024-34144","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34144","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34144","date":"2026-10-08","epss":0.48081,"percentile":0.98829}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/02/3","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34144","description":"A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM."}]},{"artifact":{"id":"3c306f976d280b39","cpes":["cpe:2.3:a:jenkins:script_security:1251.vfe552ed55f8d:*:*:*:*:jenkins:*:*"],"name":"script-security","purl":"pkg:maven/org.jenkins-ci.plugins/script-security@1251.vfe552ed55f8d","type":"jenkins-plugin","version":"1251.vfe552ed55f8d","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/ref/plugins/script-security.jpi","manifestName":"","pomArtifactID":"script-security","archiveDigests":[{"value":"c8522b7ee175ee07e9b77976b7347f964421725c","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/script-security.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/script-security.jpi","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1336.vf33a"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-v63g-v339-2673","versionConstraint":"<1336.vf33a (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:script-security","version":"1251.vfe552ed55f8d"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-v63g-v339-2673","fix":{"state":"fixed","versions":["1336.vf33a"],"available":[{"date":"2024-05-04","kind":"first-observed","version":"1336.vf33a"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34144","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34144","date":"2026-10-08","epss":0.48081,"percentile":0.98829}],"risk":39.186015000000005,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-34144","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341","http://www.openwall.com/lists/oss-security/2024/05/02/3","https://github.com/jenkinsci/script-security-plugin/releases/tag/1336.vf33a_a_9863911"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-v63g-v339-2673","description":"Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies"},"relatedVulnerabilities":[{"id":"CVE-2024-34144","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34144","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34144","date":"2026-10-08","epss":0.48081,"percentile":0.98829}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/02/3","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34144","description":"A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM."}]},{"artifact":{"id":"af7d166c6d421afa","cpes":["cpe:2.3:a:git:git:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git","purl":"pkg:deb/debian/git@1%3A2.30.2-1%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.list"},{"path":"/var/lib/dpkg/info/git.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postinst"},{"path":"/var/lib/dpkg/info/git.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postrm"},{"path":"/var/lib/dpkg/info/git.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.preinst"},{"path":"/var/lib/dpkg/info/git.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-25652","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-25652","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-25652","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-25652","date":"2026-10-08","epss":0.51883,"percentile":0.98925}],"risk":38.91225,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-25652","description":"Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using `git apply` with `--reject` when applying patches from an untrusted source. Use `git apply --stat` to inspect a patch before applying; avoid applying one that create a conflict where a link corresponding to the `*.rej` file exists."},"relatedVulnerabilities":[{"id":"CVE-2023-25652","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-25652","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-25652","date":"2026-10-08","epss":0.51883,"percentile":0.98925}],"urls":["http://www.openwall.com/lists/oss-security/2023/04/25/2","https://github.com/git/git/commit/18e2b1cfc80990719275d7b08e6e50f3e8cbc902","https://github.com/git/git/commit/668f2d53613ac8fd373926ebe219f2c29112d93e","https://github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BSXOGVVBJLYX26IAYX6PJSYQB36BREWH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/","https://security.gentoo.org/glsa/202312-15","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-25652","description":"Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using `git apply` with `--reject` when applying patches from an untrusted source. Use `git apply --stat` to inspect a patch before applying; avoid applying one that create a conflict where a link corresponding to the `*.rej` file exists."}]},{"artifact":{"id":"64d1fb374de95eb2","cpes":["cpe:2.3:a:git-man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git-man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git-man","purl":"pkg:deb/debian/git-man@1%3A2.30.2-1%2Bdeb11u2?arch=all&distro=debian-11.7&upstream=git","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git-man/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git-man/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.list"}],"upstreams":[{"name":"git"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-25652","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-25652","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-25652","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-25652","date":"2026-10-08","epss":0.51883,"percentile":0.98925}],"risk":38.91225,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-25652","description":"Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using `git apply` with `--reject` when applying patches from an untrusted source. Use `git apply --stat` to inspect a patch before applying; avoid applying one that create a conflict where a link corresponding to the `*.rej` file exists."},"relatedVulnerabilities":[{"id":"CVE-2023-25652","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-25652","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-25652","date":"2026-10-08","epss":0.51883,"percentile":0.98925}],"urls":["http://www.openwall.com/lists/oss-security/2023/04/25/2","https://github.com/git/git/commit/18e2b1cfc80990719275d7b08e6e50f3e8cbc902","https://github.com/git/git/commit/668f2d53613ac8fd373926ebe219f2c29112d93e","https://github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BSXOGVVBJLYX26IAYX6PJSYQB36BREWH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/","https://security.gentoo.org/glsa/202312-15","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-25652","description":"Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using `git apply` with `--reject` when applying patches from an untrusted source. Use `git apply --stat` to inspect a patch before applying; avoid applying one that create a conflict where a link corresponding to the `*.rej` file exists."}]},{"artifact":{"id":"21eba376b06d560f","cpes":["cpe:2.3:a:org.springframework:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_web:5.3.27:*:*:*:*:*:*:*"],"name":"spring-web","purl":"pkg:maven/org.springframework/spring-web@5.3.27","type":"java-archive","version":"5.3.27","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-web-5.3.27.jar","manifestName":"","pomArtifactID":"spring-web","archiveDigests":[{"value":"a51c45a8602052a2a90f7e645a47ba8df1547795","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-web-5.3.27.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"6.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4wrc-f8pq-fpqp","versionConstraint":"<6.0.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-web","version":"5.3.27"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4wrc-f8pq-fpqp","fix":{"state":"fixed","versions":["6.0.0"],"available":[{"date":"2022-12-10","kind":"first-observed","version":"6.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-1000027","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-1000027","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-1000027","date":"2026-10-08","epss":0.33179,"percentile":0.98331}],"risk":31.18826,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2016-1000027","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000027","https://security-tracker.debian.org/tracker/CVE-2016-1000027","https://www.tenable.com/security/research/tra-2016-20","https://github.com/spring-projects/spring-framework/issues/24434","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-1231625331","https://github.com/spring-projects/spring-framework/commit/5cbe90b2cd91b866a5a9586e460f311860e11cfa","https://support.contrastsecurity.com/hc/en-us/articles/4402400830612-Spring-web-Java-Deserialization-CVE-2016-1000027","https://github.com/spring-projects/spring-framework/issues/21680","https://github.com/spring-projects/spring-framework/commit/2b051b8b321768a4cfef83077db65c6328ffd60f","https://jira.spring.io/browse/SPR-17143?redirect=false","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-579669626","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-582313417","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-744519525","https://security.netapp.com/advisory/ntap-20230420-0009/","https://spring.io/blog/2022/05/11/spring-framework-5-3-20-and-5-2-22-available-now"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4wrc-f8pq-fpqp","description":"Pivotal Spring Framework contains unsafe Java deserialization methods"},"relatedVulnerabilities":[{"id":"CVE-2016-1000027","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-1000027","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-1000027","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-1000027","date":"2026-10-08","epss":0.33179,"percentile":0.98331}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000027","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-579669626","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-582313417","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-744519525","https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000027.json","https://security-tracker.debian.org/tracker/CVE-2016-1000027","https://security.netapp.com/advisory/ntap-20230420-0009/","https://spring.io/blog/2022/05/11/spring-framework-5-3-20-and-5-2-22-available-now","https://www.tenable.com/security/research/tra-2016-20"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000027","description":"Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrusted data is not an intended use case. The product's behavior will not be changed because some users rely on deserialization of trusted data."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u12"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-2398","versionConstraint":"< 7.74.0-1.3+deb11u12 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-2398","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u12"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u12"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"risk":29.045205000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-2398","description":"When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application."},"relatedVulnerabilities":[{"id":"CVE-2024-2398","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"urls":["http://seclists.org/fulldisclosure/2024/Jul/18","http://seclists.org/fulldisclosure/2024/Jul/19","http://seclists.org/fulldisclosure/2024/Jul/20","http://www.openwall.com/lists/oss-security/2024/03/27/3","https://curl.se/docs/CVE-2024-2398.html","https://curl.se/docs/CVE-2024-2398.json","https://hackerone.com/reports/2402845","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/","https://security.netapp.com/advisory/ntap-20240503-0009/","https://support.apple.com/kb/HT214118","https://support.apple.com/kb/HT214119","https://support.apple.com/kb/HT214120"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2398","description":"When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u12"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2398","versionConstraint":"< 7.74.0-1.3+deb11u12 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-2398","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u12"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u12"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"risk":29.045205000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-2398","description":"When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application."},"relatedVulnerabilities":[{"id":"CVE-2024-2398","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"urls":["http://seclists.org/fulldisclosure/2024/Jul/18","http://seclists.org/fulldisclosure/2024/Jul/19","http://seclists.org/fulldisclosure/2024/Jul/20","http://www.openwall.com/lists/oss-security/2024/03/27/3","https://curl.se/docs/CVE-2024-2398.html","https://curl.se/docs/CVE-2024-2398.json","https://hackerone.com/reports/2402845","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/","https://security.netapp.com/advisory/ntap-20240503-0009/","https://support.apple.com/kb/HT214118","https://support.apple.com/kb/HT214119","https://support.apple.com/kb/HT214120"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2398","description":"When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u12"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2398","versionConstraint":"< 7.74.0-1.3+deb11u12 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-2398","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u12"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u12"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"risk":29.045205000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-2398","description":"When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application."},"relatedVulnerabilities":[{"id":"CVE-2024-2398","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"urls":["http://seclists.org/fulldisclosure/2024/Jul/18","http://seclists.org/fulldisclosure/2024/Jul/19","http://seclists.org/fulldisclosure/2024/Jul/20","http://www.openwall.com/lists/oss-security/2024/03/27/3","https://curl.se/docs/CVE-2024-2398.html","https://curl.se/docs/CVE-2024-2398.json","https://hackerone.com/reports/2402845","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/","https://security.netapp.com/advisory/ntap-20240503-0009/","https://support.apple.com/kb/HT214118","https://support.apple.com/kb/HT214119","https://support.apple.com/kb/HT214120"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2398","description":"When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2511","versionConstraint":"< 1.1.1w-0+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-2511","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-08","epss":0.52421,"percentile":0.98938}],"risk":28.569444999999998,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-2511","description":"Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions  Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service  This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is being used (but not if early_data support is also configured and the default anti-replay protection is in use). In this case, under certain conditions, the session cache can get into an incorrect state and it will fail to flush properly as it fills. The session cache will continue to grow in an unbounded manner. A malicious client could deliberately create the scenario for this failure to force a Denial of Service. It may also happen by accident in normal operation.  This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS clients.  The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL 1.0.2 is also not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2024-2511","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-08","epss":0.52421,"percentile":0.98938}],"urls":["https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce","https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d","https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08","https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640","https://www.openssl.org/news/secadv/20240408.txt","http://www.openwall.com/lists/oss-security/2024/04/08/5","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240503-0013/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-354112.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2511","description":"Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-2511","versionConstraint":"< 1.1.1w-0+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-2511","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-08","epss":0.52421,"percentile":0.98938}],"risk":28.569444999999998,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-2511","description":"Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions  Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service  This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is being used (but not if early_data support is also configured and the default anti-replay protection is in use). In this case, under certain conditions, the session cache can get into an incorrect state and it will fail to flush properly as it fills. The session cache will continue to grow in an unbounded manner. A malicious client could deliberately create the scenario for this failure to force a Denial of Service. It may also happen by accident in normal operation.  This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS clients.  The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL 1.0.2 is also not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2024-2511","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-08","epss":0.52421,"percentile":0.98938}],"urls":["https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce","https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d","https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08","https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640","https://www.openssl.org/news/secadv/20240408.txt","http://www.openwall.com/lists/oss-security/2024/04/08/5","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240503-0013/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-354112.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2511","description":"Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue."}]},{"artifact":{"id":"00a648c28fb0aefe","cpes":["cpe:2.3:a:apache:commons-fileupload:1.5:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_fileupload:1.5:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:1.5:*:*:*:*:*:*:*"],"name":"commons-fileupload","purl":"pkg:maven/commons-fileupload/commons-fileupload@1.5","type":"java-archive","version":"1.5","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"commons-fileupload","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-fileupload-1.5.jar","manifestName":"","pomArtifactID":"commons-fileupload","archiveDigests":[{"value":"ad4ad2ab2961b4e1891472bd1a33fabefb0385f3","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-fileupload-1.5.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.6.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vv7r-c36w-3prj","versionConstraint":">=1.0,<1.6.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-fileupload:commons-fileupload","version":"1.5"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-vv7r-c36w-3prj","fix":{"state":"fixed","versions":["1.6.0"],"available":[{"date":"2025-07-10","kind":"first-observed","version":"1.6.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48976","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-48976","date":"2026-10-08","epss":0.32964,"percentile":0.98323}],"risk":26.70084,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-48976","https://lists.apache.org/thread/fbs3wrr3p67vkjcxogqqqqz45pqtso12","https://github.com/apache/commons-fileupload/commit/bf68f63cfb312ef4710fb3dfb4d8e4e1665f4497","http://www.openwall.com/lists/oss-security/2025/06/16/4","https://github.com/apache/tomcat/commit/97790a35a27d236fa053e660676c3f8196284d93","https://github.com/apache/commons-fileupload/commit/b247774a72a044f5d5380ae947140ee80af4e78b","https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vv7r-c36w-3prj","description":"Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers"},"relatedVulnerabilities":[{"id":"CVE-2025-48976","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48976","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-48976","date":"2026-10-08","epss":0.32964,"percentile":0.98323}],"urls":["https://lists.apache.org/thread/fbs3wrr3p67vkjcxogqqqqz45pqtso12","http://www.openwall.com/lists/oss-security/2025/06/16/4","https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48976","description":"Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload.\n\nThis issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4.\n\nUsers are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fix the issue."}]},{"artifact":{"id":"af7d166c6d421afa","cpes":["cpe:2.3:a:git:git:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git","purl":"pkg:deb/debian/git@1%3A2.30.2-1%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.list"},{"path":"/var/lib/dpkg/info/git.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postinst"},{"path":"/var/lib/dpkg/info/git.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postrm"},{"path":"/var/lib/dpkg/info/git.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.preinst"},{"path":"/var/lib/dpkg/info/git.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-32002","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-32002","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32002","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-32002","cwe":"CWE-434","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-32002","cwe":"CWE-59","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-32002","date":"2026-10-08","epss":0.29234,"percentile":0.98133}],"risk":26.3106,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-32002","description":"Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows writing a hook that will be executed while the clone operation is still running, giving the user no opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. As always, it is best to avoid cloning repositories from untrusted sources."},"relatedVulnerabilities":[{"id":"CVE-2024-32002","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32002","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-32002","cwe":"CWE-434","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-32002","cwe":"CWE-59","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-32002","date":"2026-10-08","epss":0.29234,"percentile":0.98133}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/14/2","https://git-scm.com/docs/git-clone#Documentation/git-clone.txt---recurse-submodulesltpathspecgt","https://git-scm.com/docs/git-config#Documentation/git-config.txt-coresymlinks","https://github.com/git/git/commit/97065761333fd62db1912d81b489db938d8c991d","https://github.com/git/git/security/advisories/GHSA-8h77-4q3w-gfgv","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S4CK4IYTXEOBZTEM5K3T6LWOIZ3S44AR/","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-32002","description":"Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows writing a hook that will be executed while the clone operation is still running, giving the user no opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. As always, it is best to avoid cloning repositories from untrusted sources."}]},{"artifact":{"id":"64d1fb374de95eb2","cpes":["cpe:2.3:a:git-man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git-man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git-man","purl":"pkg:deb/debian/git-man@1%3A2.30.2-1%2Bdeb11u2?arch=all&distro=debian-11.7&upstream=git","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git-man/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git-man/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.list"}],"upstreams":[{"name":"git"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-32002","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-32002","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32002","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-32002","cwe":"CWE-434","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-32002","cwe":"CWE-59","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-32002","date":"2026-10-08","epss":0.29234,"percentile":0.98133}],"risk":26.3106,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-32002","description":"Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows writing a hook that will be executed while the clone operation is still running, giving the user no opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. As always, it is best to avoid cloning repositories from untrusted sources."},"relatedVulnerabilities":[{"id":"CVE-2024-32002","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32002","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-32002","cwe":"CWE-434","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-32002","cwe":"CWE-59","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-32002","date":"2026-10-08","epss":0.29234,"percentile":0.98133}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/14/2","https://git-scm.com/docs/git-clone#Documentation/git-clone.txt---recurse-submodulesltpathspecgt","https://git-scm.com/docs/git-config#Documentation/git-config.txt-coresymlinks","https://github.com/git/git/commit/97065761333fd62db1912d81b489db938d8c991d","https://github.com/git/git/security/advisories/GHSA-8h77-4q3w-gfgv","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S4CK4IYTXEOBZTEM5K3T6LWOIZ3S44AR/","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-32002","description":"Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows writing a hook that will be executed while the clone operation is still running, giving the user no opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. As always, it is best to avoid cloning repositories from untrusted sources."}]},{"artifact":{"id":"5aa5fc0ebbc6f0c0","cpes":["cpe:2.3:a:org.jenkins-ci.main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:org.jenkins-ci.main:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins_core:2.407:*:*:*:*:*:*:*"],"name":"jenkins-core","purl":"pkg:maven/org.jenkins-ci.main/jenkins-core@2.407","type":"java-archive","version":"2.407","language":"java","licenses":["The MIT license"],"metadata":{"pomGroupID":"org.jenkins-ci.main","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","manifestName":"","pomArtifactID":"jenkins-core","archiveDigests":[{"value":"e7fc0a769dfabd6c316cde23c6bd1dd8a7c4d94b","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.452.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h856-ffvv-xvr4","versionConstraint":"<2.452.4 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.main:jenkins-core","version":"2.407"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-h856-ffvv-xvr4","fix":{"state":"fixed","versions":["2.452.4"],"available":[{"date":"2024-08-08","kind":"first-observed","version":"2.452.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-43044","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-43044","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-43044","date":"2026-10-08","epss":0.28782,"percentile":0.98105}],"risk":22.378005000000005,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-43044","https://www.jenkins.io/security/advisory/2024-08-07/#SECURITY-3430","https://github.com/jenkinsci/jenkins/commit/3f54c41b40db9e4ae7afa4209bc1ea91bb9175c0","https://github.com/jenkinsci/jenkins/commit/5d26b53ad3a5cd8c4a060eef4f56d75e65ca17a5","https://github.com/jenkinsci/jenkins/commit/cec49ce5d58048f66ac3fa88409a0d38dec09bf0","https://github.com/jenkinsci/remoting/commit/3277a8e88c9b807b9a989bd7e9176d2ec9834e47","https://github.com/jenkinsci/remoting/commit/409508a675ffc4ed9681e30bb46c8d9cb375b78c","https://github.com/jenkinsci/remoting/commit/858f3c9af69d4d216b26551ea51dde6e67479bb3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h856-ffvv-xvr4","description":"Jenkins Remoting library arbitrary file read vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-43044","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-43044","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-43044","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-43044","date":"2026-10-08","epss":0.28782,"percentile":0.98105}],"urls":["https://www.jenkins.io/security/advisory/2024-08-07/#SECURITY-3430"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-43044","description":"Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library."}]},{"artifact":{"id":"54f8dc6344473f97","cpes":["cpe:2.3:a:org.jenkins-ci.main:remoting:3107.v665000b_51092:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:remoting:3107.v665000b_51092:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:remoting:3107.v665000b_51092:*:*:*:*:*:*:*","cpe:2.3:a:remoting:remoting:3107.v665000b_51092:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:remoting:3107.v665000b_51092:*:*:*:*:*:*:*","cpe:2.3:a:main:remoting:3107.v665000b_51092:*:*:*:*:*:*:*"],"name":"remoting","purl":"pkg:maven/org.jenkins-ci.main/remoting@3107.v665000b_51092","type":"java-archive","version":"3107.v665000b_51092","language":"java","licenses":["EPL-2.0","GPL-2.0"],"metadata":{"pomGroupID":"org.jenkins-ci.main","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/remoting-3107.v665000b_51092.jar","manifestName":"","pomArtifactID":"remoting","archiveDigests":[{"value":"8c6406c5af9750470f6bab67eae8a86c48835f22","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/remoting-3107.v665000b_51092.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3206.3208"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h856-ffvv-xvr4","versionConstraint":"<3206.3208 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.main:remoting","version":"3107.v665000b_51092"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-h856-ffvv-xvr4","fix":{"state":"fixed","versions":["3206.3208"],"available":[{"date":"2024-08-08","kind":"first-observed","version":"3206.3208"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-43044","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-43044","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-43044","date":"2026-10-08","epss":0.28782,"percentile":0.98105}],"risk":22.378005000000005,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-43044","https://www.jenkins.io/security/advisory/2024-08-07/#SECURITY-3430","https://github.com/jenkinsci/jenkins/commit/3f54c41b40db9e4ae7afa4209bc1ea91bb9175c0","https://github.com/jenkinsci/jenkins/commit/5d26b53ad3a5cd8c4a060eef4f56d75e65ca17a5","https://github.com/jenkinsci/jenkins/commit/cec49ce5d58048f66ac3fa88409a0d38dec09bf0","https://github.com/jenkinsci/remoting/commit/3277a8e88c9b807b9a989bd7e9176d2ec9834e47","https://github.com/jenkinsci/remoting/commit/409508a675ffc4ed9681e30bb46c8d9cb375b78c","https://github.com/jenkinsci/remoting/commit/858f3c9af69d4d216b26551ea51dde6e67479bb3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h856-ffvv-xvr4","description":"Jenkins Remoting library arbitrary file read vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-43044","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-43044","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-43044","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-43044","date":"2026-10-08","epss":0.28782,"percentile":0.98105}],"urls":["https://www.jenkins.io/security/advisory/2024-08-07/#SECURITY-3430"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-43044","description":"Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.4"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2007-4559","versionConstraint":"< 3.6.16||>= 3.10.0, < 3.10.12||>= 3.11.0, < 3.11.4||>= 3.7.0, < 3.8.17||>= 3.9.0, < 3.9.17 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2007-4559","fix":{"state":"fixed","versions":["3.6.16","3.8.17","3.9.17","3.10.12","3.11.4"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"3.6.16"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.12"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.17"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.17"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-4559","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2007-4559","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2007-4559","date":"2026-10-08","epss":0.27095,"percentile":0.98006}],"risk":18.018175000000003,"urls":["http://mail.python.org/pipermail/python-dev/2007-August/074290.html","http://mail.python.org/pipermail/python-dev/2007-August/074292.html","http://secunia.com/advisories/26623","http://www.vupen.com/english/advisories/2007/3022","https://bugzilla.redhat.com/show_bug.cgi?id=263261","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/","https://security.gentoo.org/glsa/202309-06","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-4559","description":"Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267."},"relatedVulnerabilities":[]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.4"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-24329","versionConstraint":"< 3.7.17||>= 3.10.0, < 3.10.12||>= 3.11.0, < 3.11.4||>= 3.8.0, < 3.8.17||>= 3.9.0, < 3.9.17 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-24329","fix":{"state":"fixed","versions":["3.7.17","3.8.17","3.9.17","3.10.12","3.11.4"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"3.7.17"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.12"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.17"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.17"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24329","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24329","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24329","date":"2026-10-08","epss":0.20459,"percentile":0.9745}],"risk":15.344249999999999,"urls":["https://github.com/python/cpython/issues/102153","https://github.com/python/cpython/pull/99421","https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/","https://pointernull.com/security/python-url-parse-problem.html","https://security.netapp.com/advisory/ntap-20230324-0004/","https://www.kb.cert.org/vuls/id/127587","https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-24329","description":"An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters."},"relatedVulnerabilities":[]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-43551","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-43551","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-43551","date":"2026-10-08","epss":0.1654,"percentile":0.96934}],"risk":12.405,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-43551","description":"A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded."},"relatedVulnerabilities":[{"id":"CVE-2022-43551","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-43551","date":"2026-10-08","epss":0.1654,"percentile":0.96934}],"urls":["https://hackerone.com/reports/1755083","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230427-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-43551","description":"A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-43551","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-43551","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-43551","date":"2026-10-08","epss":0.1654,"percentile":0.96934}],"risk":12.405,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-43551","description":"A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded."},"relatedVulnerabilities":[{"id":"CVE-2022-43551","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-43551","date":"2026-10-08","epss":0.1654,"percentile":0.96934}],"urls":["https://hackerone.com/reports/1755083","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230427-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-43551","description":"A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-43551","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-43551","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-43551","date":"2026-10-08","epss":0.1654,"percentile":0.96934}],"risk":12.405,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-43551","description":"A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded."},"relatedVulnerabilities":[{"id":"CVE-2022-43551","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-43551","date":"2026-10-08","epss":0.1654,"percentile":0.96934}],"urls":["https://hackerone.com/reports/1755083","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230427-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-43551","description":"A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded."}]},{"artifact":{"id":"c3466eb679e28aa6","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A8.4p1-5%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=openssh","type":"deb","version":"1:8.4p1-5+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Beer-ware","Expat-with-advertising-restriction","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-client/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:8.4p1-5+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-51385","versionConstraint":"< 1:8.4p1-5+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssh","version":"1:8.4p1-5+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-51385","fix":{"state":"fixed","versions":["1:8.4p1-5+deb11u3"],"available":[{"date":"2023-12-22","kind":"advisory","version":"1:8.4p1-5+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-51385","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-51385","cwe":"CWE-78","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-51385","date":"2026-10-08","epss":0.19753,"percentile":0.97345}],"risk":11.357975,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5586-1","link":"https://security-tracker.debian.org/tracker/DSA-5586-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-51385","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name."},"relatedVulnerabilities":[{"id":"CVE-2023-51385","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-51385","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-51385","cwe":"CWE-78","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-51385","date":"2026-10-08","epss":0.19753,"percentile":0.97345}],"urls":["http://seclists.org/fulldisclosure/2024/Mar/21","http://www.openwall.com/lists/oss-security/2023/12/26/4","https://github.com/openssh/openssh-portable/commit/7ef3787c84b6b524501211b11a26c742f829af1a","https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html","https://security.gentoo.org/glsa/202312-17","https://security.netapp.com/advisory/ntap-20240105-0005/","https://support.apple.com/kb/HT214084","https://vin01.github.io/piptagole/ssh/security/openssh/libssh/remote-code-execution/2023/12/20/openssh-proxycommand-libssh-rce.html","https://www.debian.org/security/2023/dsa-5586","https://www.openssh.com/txt/release-9.6","https://www.openwall.com/lists/oss-security/2023/12/18/2","http://www.openwall.com/lists/oss-security/2025/10/07/1","http://www.openwall.com/lists/oss-security/2025/10/12/1","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-51385","description":"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name."}]},{"artifact":{"id":"d85c2f691b7b2343","cpes":["cpe:2.3:a:com.fasterxml.woodstox.woodstox-core:woodstox-core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.woodstox.woodstox-core:woodstox_core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.woodstox.woodstox-core:woodstox:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.woodstox:woodstox-core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.woodstox:woodstox_core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.woodstox:woodstox:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml:woodstox-core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml:woodstox_core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:woodstox-core:woodstox-core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:woodstox-core:woodstox_core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:woodstox_core:woodstox-core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:woodstox_core:woodstox_core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:woodstox-core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:woodstox_core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml:woodstox:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:woodstox-core:woodstox:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:woodstox:woodstox-core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:woodstox:woodstox_core:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:woodstox_core:woodstox:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:woodstox:6.3.1:*:*:*:*:*:*:*","cpe:2.3:a:woodstox:woodstox:6.3.1:*:*:*:*:*:*:*"],"name":"woodstox-core","purl":"pkg:maven/com.fasterxml.woodstox/woodstox-core@6.3.1","type":"java-archive","version":"6.3.1","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.woodstox","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jackson2-api.hpi:WEB-INF/lib/woodstox-core-6.3.1.jar","manifestName":"","pomArtifactID":"woodstox-core","archiveDigests":[{"value":"bf29b07ca4dd81ef3c0bc18c8bd5617510a81c5d","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jackson2-api.hpi:WEB-INF/lib/woodstox-core-6.3.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"6.4.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3f7h-mf4q-vrm4","versionConstraint":">=6.0.0,<6.4.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.woodstox:woodstox-core","version":"6.3.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-3f7h-mf4q-vrm4","fix":{"state":"fixed","versions":["6.4.0"],"available":[{"date":"2022-10-27","kind":"first-observed","version":"6.4.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40152","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-40152","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-40152","date":"2026-10-08","epss":0.1873,"percentile":0.97208}],"risk":10.769749999999998,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-40152","https://github.com/x-stream/xstream/issues/304","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47434","https://github.com/FasterXML/woodstox/issues/157","https://github.com/FasterXML/woodstox/issues/160","https://github.com/FasterXML/woodstox/pull/159"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3f7h-mf4q-vrm4","description":"Denial of Service due to parser crash"},"relatedVulnerabilities":[{"id":"CVE-2022-40152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40152","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-40152","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-40152","date":"2026-10-08","epss":0.1873,"percentile":0.97208}],"urls":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47434","https://github.com/x-stream/xstream/issues/304"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-40152","description":"Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u13"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-7264","versionConstraint":"< 7.74.0-1.3+deb11u13 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-7264","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u13"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u13"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"risk":9.948075,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.  This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used."},"relatedVulnerabilities":[{"id":"CVE-2024-7264","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/31/1","https://curl.se/docs/CVE-2024-7264.html","https://curl.se/docs/CVE-2024-7264.json","https://hackerone.com/reports/2629968","https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519","https://security.netapp.com/advisory/ntap-20240828-0008/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u13"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-7264","versionConstraint":"< 7.74.0-1.3+deb11u13 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-7264","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u13"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u13"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"risk":9.948075,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.  This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used."},"relatedVulnerabilities":[{"id":"CVE-2024-7264","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/31/1","https://curl.se/docs/CVE-2024-7264.html","https://curl.se/docs/CVE-2024-7264.json","https://hackerone.com/reports/2629968","https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519","https://security.netapp.com/advisory/ntap-20240828-0008/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u13"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-7264","versionConstraint":"< 7.74.0-1.3+deb11u13 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-7264","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u13"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u13"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"risk":9.948075,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.  This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used."},"relatedVulnerabilities":[{"id":"CVE-2024-7264","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/31/1","https://curl.se/docs/CVE-2024-7264.html","https://curl.se/docs/CVE-2024-7264.json","https://hackerone.com/reports/2629968","https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519","https://security.netapp.com/advisory/ntap-20240828-0008/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used."}]},{"artifact":{"id":"a0f5d0ed20be6365","cpes":["cpe:2.3:a:apache:httpclient:4.0.1:*:*:*:*:*:*:*"],"name":"httpclient","purl":"pkg:maven/org.apache.httpcomponents/httpclient@4.0.1","type":"java-archive","version":"4.0.1","language":"java","licenses":["Apache-2.0","CC-BY-2.5"],"metadata":{"pomGroupID":"org.apache.httpcomponents","virtualPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/httpclient-4.0.1.jar","manifestName":"","pomArtifactID":"httpclient","archiveDigests":[{"value":"1d7d28fa738bdbfe4fbd895d9486308999bdf440","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/google-login.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/httpclient-4.0.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.3.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-fmj5-wv96-r2ch","versionConstraint":"<4.3.6 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.httpcomponents:httpclient","version":"4.0.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-fmj5-wv96-r2ch","fix":{"state":"fixed","versions":["4.3.6"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"4.3.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2015-5262","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-5262","date":"2026-10-08","epss":0.1876,"percentile":0.97212}],"risk":9.379999999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2015-5262","https://bugzilla.redhat.com/show_bug.cgi?id=1261538","https://issues.apache.org/jira/browse/HTTPCLIENT-1478","https://jenkins.io/security/advisory/2018-02-26/","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167962.html","http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167999.html","http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168030.html","http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html","http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html","http://svn.apache.org/viewvc?view=revision&revision=1626784","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.securitytracker.com/id/1033743","http://www.ubuntu.com/usn/USN-2769-1","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-fmj5-wv96-r2ch","description":"Denial of service vulnerability in org.apache.httpcomponents:httpclient"},"relatedVulnerabilities":[{"id":"CVE-2015-5262","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-5262","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-5262","date":"2026-10-08","epss":0.1876,"percentile":0.97212}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167962.html","http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167999.html","http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168030.html","http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html","http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html","http://svn.apache.org/viewvc?view=revision&revision=1626784","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.securitytracker.com/id/1033743","http://www.ubuntu.com/usn/USN-2769-1","https://bugzilla.redhat.com/show_bug.cgi?id=1261538","https://issues.apache.org/jira/browse/HTTPCLIENT-1478","https://jenkins.io/security/advisory/2018-02-26/","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-5262","description":"http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors."}]},{"artifact":{"id":"f75c33d381bc72a0","cpes":["cpe:2.3:a:com.google.code.gson:gson:2.8.6:*:*:*:*:*:*:*","cpe:2.3:a:com.google.gson:gson:2.8.6:*:*:*:*:*:*:*","cpe:2.3:a:google:gson:2.8.6:*:*:*:*:*:*:*","cpe:2.3:a:code:gson:2.8.6:*:*:*:*:*:*:*","cpe:2.3:a:gson:gson:2.8.6:*:*:*:*:*:*:*"],"name":"gson","purl":"pkg:maven/com.google.code.gson/gson@2.8.6","type":"java-archive","version":"2.8.6","language":"java","licenses":[],"metadata":{"pomGroupID":"com.google.code.gson","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/trilead-api.hpi:WEB-INF/lib/gson-2.8.6.jar","manifestName":"","pomArtifactID":"gson","archiveDigests":[{"value":"9180733b7df8542621dc12e21e87557e8c99b8cb","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/trilead-api.hpi:WEB-INF/lib/gson-2.8.6.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.8.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4jrv-ppp4-jm57","versionConstraint":"<2.8.9 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.google.code.gson:gson","version":"2.8.6"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4jrv-ppp4-jm57","fix":{"state":"fixed","versions":["2.8.9"],"available":[{"date":"2022-05-21","kind":"first-observed","version":"2.8.9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-25647","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-25647","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-25647","date":"2026-10-08","epss":0.1223,"percentile":0.96079}],"risk":9.2948,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-25647","https://github.com/google/gson/pull/1991","https://github.com/google/gson/pull/1991/commits","https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327","https://lists.debian.org/debian-lts-announce/2022/05/msg00015.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://lists.debian.org/debian-lts-announce/2022/09/msg00009.html","https://www.debian.org/security/2022/dsa-5227","https://security.netapp.com/advisory/ntap-20220901-0009"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4jrv-ppp4-jm57","description":"Deserialization of Untrusted Data in Gson"},"relatedVulnerabilities":[{"id":"CVE-2022-25647","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"report@snyk.io","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-25647","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-25647","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-25647","date":"2026-10-08","epss":0.1223,"percentile":0.96079}],"urls":["https://github.com/google/gson/pull/1991","https://github.com/google/gson/pull/1991/commits","https://lists.debian.org/debian-lts-announce/2022/05/msg00015.html","https://lists.debian.org/debian-lts-announce/2022/09/msg00009.html","https://security.netapp.com/advisory/ntap-20220901-0009/","https://snyk.io/vuln/SNYK-JAVA-COMGOOGLECODEGSON-1730327","https://www.debian.org/security/2022/dsa-5227","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-25647","description":"The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-5535","versionConstraint":"< 1.1.1w-0+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-5535","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-08","epss":0.05582,"percentile":0.92684}],"risk":5.05171,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-5535","description":"Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.  Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or a crash. In particular this issue could result in up to 255 bytes of arbitrary private data from memory being sent to the peer leading to a loss of confidentiality. However, only applications that directly call the SSL_select_next_proto function with a 0 length list of supported client protocols are affected by this issue. This would normally never be a valid scenario and is typically not under attacker control but may occur by accident in the case of a configuration or programming error in the calling application.  The OpenSSL API function SSL_select_next_proto is typically used by TLS applications that support ALPN (Application Layer Protocol Negotiation) or NPN (Next Protocol Negotiation). NPN is older, was never standardised and is deprecated in favour of ALPN. We believe that ALPN is significantly more widely deployed than NPN. The SSL_select_next_proto function accepts a list of protocols from the server and a list of protocols from the client and returns the first protocol that appears in the server list that also appears in the client list. In the case of no overlap between the two lists it returns the first item in the client list. In either case it will signal whether an overlap between the two lists was found. In the case where SSL_select_next_proto is called with a zero length client list it fails to notice this condition and returns the memory immediately following the client list pointer (and reports that there was no overlap in the lists).  This function is typically called from a server side application callback for ALPN or a client side application callback for NPN. In the case of ALPN the list of protocols supplied by the client is guaranteed by libssl to never be zero in length. The list of server protocols comes from the application and should never normally be expected to be of zero length. In this case if the SSL_select_next_proto function has been called as expected (with the list supplied by the client passed in the client/client_len parameters), then the application will not be vulnerable to this issue. If the application has accidentally been configured with a zero length server list, and has accidentally passed that zero length server list in the client/client_len parameters, and has additionally failed to correctly handle a \"no overlap\" response (which would normally result in a handshake failure in ALPN) then it will be vulnerable to this problem.  In the case of NPN, the protocol permits the client to opportunistically select a protocol when there is no overlap. OpenSSL returns the first client protocol in the no overlap case in support of this. The list of client protocols comes from the application and should never normally be expected to be of zero length. However if the SSL_select_next_proto function is accidentally called with a client_len of 0 then an invalid memory pointer will be returned instead. If the application uses this output as the opportunistic protocol then the loss of confidentiality will occur.  This issue has been assessed as Low severity because applications are most likely to be vulnerable if they are using NPN instead of ALPN - but NPN is not widely used. It also requires an application configuration or programming error. Finally, this issue would not typically be under attacker control making active exploitation unlikely.  The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.  Due to the low severity of this issue we are not issuing new releases of OpenSSL at this time. The fix will be included in the next releases when they become available."},"relatedVulnerabilities":[{"id":"CVE-2024-5535","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-08","epss":0.05582,"percentile":0.92684}],"urls":["https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37","https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e","https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c","https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c","https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c","https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87","https://www.openssl.org/news/secadv/20240627.txt","http://www.openwall.com/lists/oss-security/2024/06/27/1","http://www.openwall.com/lists/oss-security/2024/06/28/4","http://www.openwall.com/lists/oss-security/2024/08/15/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240712-0005/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-5535","description":"Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \"no overlap\"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-5535","versionConstraint":"< 1.1.1w-0+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-5535","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-08","epss":0.05582,"percentile":0.92684}],"risk":5.05171,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-5535","description":"Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.  Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or a crash. In particular this issue could result in up to 255 bytes of arbitrary private data from memory being sent to the peer leading to a loss of confidentiality. However, only applications that directly call the SSL_select_next_proto function with a 0 length list of supported client protocols are affected by this issue. This would normally never be a valid scenario and is typically not under attacker control but may occur by accident in the case of a configuration or programming error in the calling application.  The OpenSSL API function SSL_select_next_proto is typically used by TLS applications that support ALPN (Application Layer Protocol Negotiation) or NPN (Next Protocol Negotiation). NPN is older, was never standardised and is deprecated in favour of ALPN. We believe that ALPN is significantly more widely deployed than NPN. The SSL_select_next_proto function accepts a list of protocols from the server and a list of protocols from the client and returns the first protocol that appears in the server list that also appears in the client list. In the case of no overlap between the two lists it returns the first item in the client list. In either case it will signal whether an overlap between the two lists was found. In the case where SSL_select_next_proto is called with a zero length client list it fails to notice this condition and returns the memory immediately following the client list pointer (and reports that there was no overlap in the lists).  This function is typically called from a server side application callback for ALPN or a client side application callback for NPN. In the case of ALPN the list of protocols supplied by the client is guaranteed by libssl to never be zero in length. The list of server protocols comes from the application and should never normally be expected to be of zero length. In this case if the SSL_select_next_proto function has been called as expected (with the list supplied by the client passed in the client/client_len parameters), then the application will not be vulnerable to this issue. If the application has accidentally been configured with a zero length server list, and has accidentally passed that zero length server list in the client/client_len parameters, and has additionally failed to correctly handle a \"no overlap\" response (which would normally result in a handshake failure in ALPN) then it will be vulnerable to this problem.  In the case of NPN, the protocol permits the client to opportunistically select a protocol when there is no overlap. OpenSSL returns the first client protocol in the no overlap case in support of this. The list of client protocols comes from the application and should never normally be expected to be of zero length. However if the SSL_select_next_proto function is accidentally called with a client_len of 0 then an invalid memory pointer will be returned instead. If the application uses this output as the opportunistic protocol then the loss of confidentiality will occur.  This issue has been assessed as Low severity because applications are most likely to be vulnerable if they are using NPN instead of ALPN - but NPN is not widely used. It also requires an application configuration or programming error. Finally, this issue would not typically be under attacker control making active exploitation unlikely.  The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.  Due to the low severity of this issue we are not issuing new releases of OpenSSL at this time. The fix will be included in the next releases when they become available."},"relatedVulnerabilities":[{"id":"CVE-2024-5535","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-08","epss":0.05582,"percentile":0.92684}],"urls":["https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37","https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e","https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c","https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c","https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c","https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87","https://www.openssl.org/news/secadv/20240627.txt","http://www.openwall.com/lists/oss-security/2024/06/27/1","http://www.openwall.com/lists/oss-security/2024/06/28/4","http://www.openwall.com/lists/oss-security/2024/08/15/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240712-0005/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-5535","description":"Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \"no overlap\"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available."}]},{"artifact":{"id":"c3466eb679e28aa6","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A8.4p1-5%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=openssh","type":"deb","version":"1:8.4p1-5+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Beer-ware","Expat-with-advertising-restriction","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-client/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:8.4p1-5+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-48795","versionConstraint":"< 1:8.4p1-5+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssh","version":"1:8.4p1-5+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-48795","fix":{"state":"fixed","versions":["1:8.4p1-5+deb11u3"],"available":[{"date":"2023-12-22","kind":"advisory","version":"1:8.4p1-5+deb11u3"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-48795","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-48795","cwe":"CWE-354","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-48795","date":"2026-10-08","epss":0.93547,"percentile":0.9984}],"risk":4.677350000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5586-1","link":"https://security-tracker.debian.org/tracker/DSA-5586-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-48795","description":"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust."},"relatedVulnerabilities":[{"id":"CVE-2023-48795","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48795","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-48795","cwe":"CWE-354","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-48795","date":"2026-10-08","epss":0.93547,"percentile":0.9984}],"urls":["http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html","http://seclists.org/fulldisclosure/2024/Mar/21","http://www.openwall.com/lists/oss-security/2023/12/18/3","http://www.openwall.com/lists/oss-security/2023/12/19/5","http://www.openwall.com/lists/oss-security/2023/12/20/3","http://www.openwall.com/lists/oss-security/2024/03/06/3","http://www.openwall.com/lists/oss-security/2024/04/17/8","https://access.redhat.com/security/cve/cve-2023-48795","https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/","https://bugs.gentoo.org/920280","https://bugzilla.redhat.com/show_bug.cgi?id=2254210","https://bugzilla.suse.com/show_bug.cgi?id=1217950","https://crates.io/crates/thrussh/versions","https://filezilla-project.org/versions.php","https://forum.netgate.com/topic/184941/terrapin-ssh-attack","https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6","https://github.com/NixOS/nixpkgs/pull/275249","https://github.com/PowerShell/Win32-OpenSSH/issues/2189","https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta","https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0","https://github.com/TeraTermProject/teraterm/releases/tag/v5.1","https://github.com/advisories/GHSA-45x7-px36-x8w8","https://github.com/apache/mina-sshd/issues/445","https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab","https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22","https://github.com/cyd01/KiTTY/issues/520","https://github.com/drakkan/sftpgo/releases/tag/v2.5.6","https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42","https://github.com/erlang/otp/releases/tag/OTP-26.2.1","https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d","https://github.com/hierynomus/sshj/issues/916","https://github.com/janmojzis/tinyssh/issues/81","https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5","https://github.com/libssh2/libssh2/pull/1291","https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25","https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3","https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15","https://github.com/mwiede/jsch/issues/457","https://github.com/mwiede/jsch/pull/461","https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16","https://github.com/openssh/openssh-portable/commits/master","https://github.com/paramiko/paramiko/issues/2337","https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES","https://github.com/proftpd/proftpd/issues/456","https://github.com/rapier1/hpn-ssh/releases","https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst","https://github.com/ronf/asyncssh/tags","https://github.com/ssh-mitm/ssh-mitm/issues/165","https://github.com/warp-tech/russh/releases/tag/v0.40.2","https://gitlab.com/libssh/libssh-mirror/-/tags","https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ","https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg","https://help.panic.com/releasenotes/transmit5/","https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/","https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html","https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/","https://matt.ucc.asn.au/dropbear/CHANGES","https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC","https://news.ycombinator.com/item?id=38684904","https://news.ycombinator.com/item?id=38685286","https://news.ycombinator.com/item?id=38732005","https://nova.app/releases/#v11.8","https://oryx-embedded.com/download/#changelog","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002","https://roumenpetrov.info/secsh/#news20231220","https://security-tracker.debian.org/tracker/CVE-2023-48795","https://security-tracker.debian.org/tracker/source-package/libssh2","https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg","https://security-tracker.debian.org/tracker/source-package/trilead-ssh2","https://security.gentoo.org/glsa/202312-16","https://security.gentoo.org/glsa/202312-17","https://security.netapp.com/advisory/ntap-20240105-0004/","https://support.apple.com/kb/HT214084","https://thorntech.com/cve-2023-48795-and-sftp-gateway/","https://twitter.com/TrueSkrillor/status/1736774389725565005","https://ubuntu.com/security/CVE-2023-48795","https://winscp.net/eng/docs/history#6.2.2","https://www.bitvise.com/ssh-client-version-history#933","https://www.bitvise.com/ssh-server-version-history","https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html","https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update","https://www.debian.org/security/2023/dsa-5586","https://www.debian.org/security/2023/dsa-5588","https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc","https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508","https://www.netsarang.com/en/xshell-update-history/","https://www.openssh.com/openbsd.html","https://www.openssh.com/txt/release-9.6","https://www.openwall.com/lists/oss-security/2023/12/18/2","https://www.openwall.com/lists/oss-security/2023/12/20/3","https://www.paramiko.org/changelog.html","https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/","https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/","https://www.terrapin-attack.com","https://www.theregister.com/2023/12/20/terrapin_attack_ssh","https://www.vandyke.com/products/securecrt/history.txt","https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/","https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit","https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-48795","description":"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust."}]},{"artifact":{"id":"a0f5d0ed20be6365","cpes":["cpe:2.3:a:apache:httpclient:4.0.1:*:*:*:*:*:*:*"],"name":"httpclient","purl":"pkg:maven/org.apache.httpcomponents/httpclient@4.0.1","type":"java-archive","version":"4.0.1","language":"java","licenses":["Apache-2.0","CC-BY-2.5"],"metadata":{"pomGroupID":"org.apache.httpcomponents","virtualPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/httpclient-4.0.1.jar","manifestName":"","pomArtifactID":"httpclient","archiveDigests":[{"value":"1d7d28fa738bdbfe4fbd895d9486308999bdf440","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/google-login.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/httpclient-4.0.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.5.13"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7r82-7xv7-xcpj","versionConstraint":"<4.5.13 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.httpcomponents:httpclient","version":"4.0.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-7r82-7xv7-xcpj","fix":{"state":"fixed","versions":["4.5.13"],"available":[{"date":"2021-06-04","kind":"first-observed","version":"4.5.13"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-13956","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-13956","date":"2026-10-08","epss":0.09032,"percentile":0.95163}],"risk":4.65148,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2020-13956","https://lists.apache.org/thread.html/r043a75acdeb52b15dd5e9524cdadef4202e6a5228644206acf9363f9@%3Cdev.hive.apache.org%3E","https://lists.apache.org/thread.html/r12cb62751b35bdcda0ae2a08b67877d665a1f4d41eee0fa7367169e0@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r2dc7930b43eadc78220d269b79e13ecd387e4bee52db67b2f47d4303@%3Cgitbox.hive.apache.org%3E","https://lists.apache.org/thread.html/r34178ab6ef106bc940665fd3f4ba5026fac3603b3fa2aefafa0b619d@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r5de3d3808e7b5028df966e45115e006456c4e8931dc1e29036f17927@%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/r5fec9c1d67f928179adf484b01e7becd7c0a6fdfe3a08f92ea743b90@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r63296c45d5d84447babaf39bd1487329d8a80d8d563e67a4b6f3d8a7@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r6dab7da30f8bf075f79ee189e33b45a197502e2676481bb8787fc0d7%40%3Cdev.hc.apache.org%3E","https://lists.apache.org/thread.html/rae14ae25ff4a60251e3ba2629c082c5ba3851dfd4d21218b99b56652@%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/rb33212dab7beccaf1ffef9b88610047c644f644c7a0ebdc44d77e381@%3Ccommits.turbine.apache.org%3E","https://lists.apache.org/thread.html/rb725052404fabffbe093c83b2c46f3f87e12c3193a82379afbc529f8@%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/rcced7ed3237c29cd19c1e9bf465d0038b8b2e967b99fc283db7ca553@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/rcd9ad5dda60c82ab0d0c9bd3e9cb1dc740804451fc20c7f451ef5cc4@%3Cgitbox.hive.apache.org%3E","https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/rd5ab56beb2ac6879f6ab427bc4e5f7691aed8362d17b713f61779858@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/re504acd4d63b8df2a7353658f45c9a3137e5f80e41cf7de50058b2c1@%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/rf7ca60f78f05b772cc07d27e31bcd112f9910a05caf9095e38ee150f@%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/rfc00884c7b7ca878297bffe45fcb742c362b00b26ba37070706d44c3@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r03bbc318c81be21f5c8a9b85e34f2ecc741aa804a8e43b0ef2c37749@%3Cissues.maven.apache.org%3E","https://lists.apache.org/thread.html/r8aa1e5c343b89aec5b69961471950e862f15246cb6392910161c389b@%3Cissues.maven.apache.org%3E","https://lists.apache.org/thread.html/ra539f20ef0fb0c27ee39945b5f56bf162e5c13d1c60f7344dab8de3b@%3Cissues.maven.apache.org%3E","https://lists.apache.org/thread.html/r06cf3ca5c8ceb94b39cd24a73d4e96153b485a7dac88444dd876accb@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/r2a03dc210231d7e852ef73015f71792ac0fcaca6cccc024c522ef17d@%3Ccommits.creadur.apache.org%3E","https://lists.apache.org/thread.html/r34efec51cb817397ccf9f86e25a75676d435ba5f83ee7b2eabdad707@%3Ccommits.creadur.apache.org%3E","https://lists.apache.org/thread.html/r3f740e4c38bba1face49078aa5cbeeb558c27be601cc9712ad2dcd1e@%3Ccommits.creadur.apache.org%3E","https://lists.apache.org/thread.html/r549ac8c159bf0c568c19670bedeb8d7c0074beded951d34b1c1d0d05@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r55b2a1d1e9b1ec9db792b93da8f0f99a4fd5a5310b02673359d9b4d1@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r6eb2dae157dbc9af1f30d1f64e9c60d4ebef618f3dce4a0e32d6ea4d@%3Ccommits.drill.apache.org%3E","https://lists.apache.org/thread.html/r70c429923100c5a4fae8e5bc71c8a2d39af3de4888f50a0ac3755e6f@%3Ccommits.creadur.apache.org%3E","https://lists.apache.org/thread.html/r9e52a6c72c8365000ecd035e48cc9fee5a677a150350d4420c46443d@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/rad6222134183046f3928f733bf680919e0c390739bfbfe6c90049673@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/rb4ba262d6f08ab9cf8b1ebbcd9b00b0368ffe90dad7ad7918b4b56fc@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/rc3739e0ad4bcf1888c6925233bfc37dd71156bbc8416604833095c42@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/rea3dbf633dde5008d38bf6600a3738b9216e733e03f9ff7becf79625@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/reef569c2419705754a3acf42b5f19b2a158153cef0e448158bc54917@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/rfb35f6db9ba1f1e061b63769a4eff5abadcc254ebfefc280e5a0dcf1@%3Ccommits.creadur.apache.org%3E","https://www.oracle.com/security-alerts/cpuApr2021.html","https://lists.apache.org/thread.html/rc990e2462ec32b09523deafb2c73606208599e196fa2d7f50bdbc587@%3Cissues.maven.apache.org%3E","https://lists.apache.org/thread.html/r132e4c6a560cfc519caa1aaee63bdd4036327610eadbd89f76dd5457@%3Cdev.creadur.apache.org%3E","https://lists.apache.org/thread.html/r6a3cda38d050ebe13c1bc9a28d0a8ec38945095d07eca49046bcb89f@%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/rc505fee574fe8d18f9b0c655a4d120b0ae21bb6a73b96003e1d9be35@%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/r5b55f65c123a7481104d663a915ec45a0d103e6aaa03f42ed1c07a89@%3Cdev.jackrabbit.apache.org%3E","https://lists.apache.org/thread.html/rc0863892ccfd9fd0d0ae10091f24ee769fb39b8957fe4ebabfc11f17@%3Cdev.jackrabbit.apache.org%3E","https://lists.apache.org/thread.html/rfbedcb586a1e7dfce87ee03c720e583fc2ceeafa05f35c542cecc624@%3Cissues.solr.apache.org%3E","https://www.oracle.com//security-alerts/cpujul2021.html","https://lists.apache.org/thread.html/r87ddc09295c27f25471269ad0a79433a91224045988b88f0413a97ec@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf03228972e56cb4a03e6d9558188c2938078cf3ceb23a3fead87c9ca@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/r2835543ef0f91adcc47da72389b816e36936f584c7be584d2314fac3@%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/rc5c6ccb86d2afe46bbd4b71573f0448dc1f87bbcd5a0d8c7f8f904b2@%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/rf43d17ed0d1fb4fb79036b582810ef60b18b1ef3add0d5dea825af1e@%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/r6d672b46622842e565e00f6ef6bef83eb55d8792aac2bee75bff9a2a@%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/r3cecd59fba74404cbf4eb430135e1080897fb376f111406a78bed13a@%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/ree942561f4620313c75982a4e5f3b74fe6f7062b073210779648eec2@%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/rf4db88c22e1be9eb60c7dc623d0528642c045fb196a24774ac2fa3a3@%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/r0bebe6f9808ac7bdf572873b4fa96a29c6398c90dab29f131f3ebffe@%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/r4850b3fbaea02fde2886e461005e4af8d37c80a48b3ce2a6edca0e30@%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/ra8bc6b61c5df301a6fe5a716315528ecd17ccb8a7f907e24a47a1a5e@%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/r0a75b8f0f72f3e18442dc56d33f3827b905f2fe5b7ba48997436f5d1@%3Cissues.solr.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2021.html","https://lists.apache.org/thread.html/r69a94e2f302d1b778bdfefe90fcb4b8c50b226438c3c8c1d0de85a19@%3Cdev.ranger.apache.org%3E","https://www.oracle.com/security-alerts/cpujan2022.html","https://security.netapp.com/advisory/ntap-20220210-0002/","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7r82-7xv7-xcpj","description":"Cross-site scripting in Apache HttpClient"},"relatedVulnerabilities":[{"id":"CVE-2020-13956","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-13956","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-13956","date":"2026-10-08","epss":0.09032,"percentile":0.95163}],"urls":["https://lists.apache.org/thread.html/r03bbc318c81be21f5c8a9b85e34f2ecc741aa804a8e43b0ef2c37749%40%3Cissues.maven.apache.org%3E","https://lists.apache.org/thread.html/r043a75acdeb52b15dd5e9524cdadef4202e6a5228644206acf9363f9%40%3Cdev.hive.apache.org%3E","https://lists.apache.org/thread.html/r06cf3ca5c8ceb94b39cd24a73d4e96153b485a7dac88444dd876accb%40%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/r0a75b8f0f72f3e18442dc56d33f3827b905f2fe5b7ba48997436f5d1%40%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/r0bebe6f9808ac7bdf572873b4fa96a29c6398c90dab29f131f3ebffe%40%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/r12cb62751b35bdcda0ae2a08b67877d665a1f4d41eee0fa7367169e0%40%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r132e4c6a560cfc519caa1aaee63bdd4036327610eadbd89f76dd5457%40%3Cdev.creadur.apache.org%3E","https://lists.apache.org/thread.html/r2835543ef0f91adcc47da72389b816e36936f584c7be584d2314fac3%40%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/r2a03dc210231d7e852ef73015f71792ac0fcaca6cccc024c522ef17d%40%3Ccommits.creadur.apache.org%3E","https://lists.apache.org/thread.html/r2dc7930b43eadc78220d269b79e13ecd387e4bee52db67b2f47d4303%40%3Cgitbox.hive.apache.org%3E","https://lists.apache.org/thread.html/r34178ab6ef106bc940665fd3f4ba5026fac3603b3fa2aefafa0b619d%40%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r34efec51cb817397ccf9f86e25a75676d435ba5f83ee7b2eabdad707%40%3Ccommits.creadur.apache.org%3E","https://lists.apache.org/thread.html/r3cecd59fba74404cbf4eb430135e1080897fb376f111406a78bed13a%40%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/r3f740e4c38bba1face49078aa5cbeeb558c27be601cc9712ad2dcd1e%40%3Ccommits.creadur.apache.org%3E","https://lists.apache.org/thread.html/r4850b3fbaea02fde2886e461005e4af8d37c80a48b3ce2a6edca0e30%40%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/r549ac8c159bf0c568c19670bedeb8d7c0074beded951d34b1c1d0d05%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r55b2a1d1e9b1ec9db792b93da8f0f99a4fd5a5310b02673359d9b4d1%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r5b55f65c123a7481104d663a915ec45a0d103e6aaa03f42ed1c07a89%40%3Cdev.jackrabbit.apache.org%3E","https://lists.apache.org/thread.html/r5de3d3808e7b5028df966e45115e006456c4e8931dc1e29036f17927%40%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/r5fec9c1d67f928179adf484b01e7becd7c0a6fdfe3a08f92ea743b90%40%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r63296c45d5d84447babaf39bd1487329d8a80d8d563e67a4b6f3d8a7%40%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r69a94e2f302d1b778bdfefe90fcb4b8c50b226438c3c8c1d0de85a19%40%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/r6a3cda38d050ebe13c1bc9a28d0a8ec38945095d07eca49046bcb89f%40%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/r6d672b46622842e565e00f6ef6bef83eb55d8792aac2bee75bff9a2a%40%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/r6dab7da30f8bf075f79ee189e33b45a197502e2676481bb8787fc0d7%40%3Cdev.hc.apache.org%3E","https://lists.apache.org/thread.html/r6eb2dae157dbc9af1f30d1f64e9c60d4ebef618f3dce4a0e32d6ea4d%40%3Ccommits.drill.apache.org%3E","https://lists.apache.org/thread.html/r70c429923100c5a4fae8e5bc71c8a2d39af3de4888f50a0ac3755e6f%40%3Ccommits.creadur.apache.org%3E","https://lists.apache.org/thread.html/r87ddc09295c27f25471269ad0a79433a91224045988b88f0413a97ec%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/r8aa1e5c343b89aec5b69961471950e862f15246cb6392910161c389b%40%3Cissues.maven.apache.org%3E","https://lists.apache.org/thread.html/r9e52a6c72c8365000ecd035e48cc9fee5a677a150350d4420c46443d%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/ra539f20ef0fb0c27ee39945b5f56bf162e5c13d1c60f7344dab8de3b%40%3Cissues.maven.apache.org%3E","https://lists.apache.org/thread.html/ra8bc6b61c5df301a6fe5a716315528ecd17ccb8a7f907e24a47a1a5e%40%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/rad6222134183046f3928f733bf680919e0c390739bfbfe6c90049673%40%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/rae14ae25ff4a60251e3ba2629c082c5ba3851dfd4d21218b99b56652%40%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/rb33212dab7beccaf1ffef9b88610047c644f644c7a0ebdc44d77e381%40%3Ccommits.turbine.apache.org%3E","https://lists.apache.org/thread.html/rb4ba262d6f08ab9cf8b1ebbcd9b00b0368ffe90dad7ad7918b4b56fc%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/rb725052404fabffbe093c83b2c46f3f87e12c3193a82379afbc529f8%40%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/rc0863892ccfd9fd0d0ae10091f24ee769fb39b8957fe4ebabfc11f17%40%3Cdev.jackrabbit.apache.org%3E","https://lists.apache.org/thread.html/rc3739e0ad4bcf1888c6925233bfc37dd71156bbc8416604833095c42%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/rc505fee574fe8d18f9b0c655a4d120b0ae21bb6a73b96003e1d9be35%40%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/rc5c6ccb86d2afe46bbd4b71573f0448dc1f87bbcd5a0d8c7f8f904b2%40%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/rc990e2462ec32b09523deafb2c73606208599e196fa2d7f50bdbc587%40%3Cissues.maven.apache.org%3E","https://lists.apache.org/thread.html/rcced7ed3237c29cd19c1e9bf465d0038b8b2e967b99fc283db7ca553%40%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/rcd9ad5dda60c82ab0d0c9bd3e9cb1dc740804451fc20c7f451ef5cc4%40%3Cgitbox.hive.apache.org%3E","https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/rd5ab56beb2ac6879f6ab427bc4e5f7691aed8362d17b713f61779858%40%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/re504acd4d63b8df2a7353658f45c9a3137e5f80e41cf7de50058b2c1%40%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/rea3dbf633dde5008d38bf6600a3738b9216e733e03f9ff7becf79625%40%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/ree942561f4620313c75982a4e5f3b74fe6f7062b073210779648eec2%40%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/reef569c2419705754a3acf42b5f19b2a158153cef0e448158bc54917%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/rf03228972e56cb4a03e6d9558188c2938078cf3ceb23a3fead87c9ca%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf43d17ed0d1fb4fb79036b582810ef60b18b1ef3add0d5dea825af1e%40%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/rf4db88c22e1be9eb60c7dc623d0528642c045fb196a24774ac2fa3a3%40%3Cissues.lucene.apache.org%3E","https://lists.apache.org/thread.html/rf7ca60f78f05b772cc07d27e31bcd112f9910a05caf9095e38ee150f%40%3Cdev.ranger.apache.org%3E","https://lists.apache.org/thread.html/rfb35f6db9ba1f1e061b63769a4eff5abadcc254ebfefc280e5a0dcf1%40%3Ccommits.creadur.apache.org%3E","https://lists.apache.org/thread.html/rfbedcb586a1e7dfce87ee03c720e583fc2ceeafa05f35c542cecc624%40%3Cissues.solr.apache.org%3E","https://lists.apache.org/thread.html/rfc00884c7b7ca878297bffe45fcb742c362b00b26ba37070706d44c3%40%3Cissues.hive.apache.org%3E","https://security.netapp.com/advisory/ntap-20220210-0002/","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://priyankn.github.io/2021-02-26-CVE-2020-13956/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-13956","description":"Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution."}]},{"artifact":{"id":"af7d166c6d421afa","cpes":["cpe:2.3:a:git:git:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git","purl":"pkg:deb/debian/git@1%3A2.30.2-1%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.list"},{"path":"/var/lib/dpkg/info/git.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postinst"},{"path":"/var/lib/dpkg/info/git.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postrm"},{"path":"/var/lib/dpkg/info/git.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.preinst"},{"path":"/var/lib/dpkg/info/git.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-29007","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-29007","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29007","cwe":"CWE-74","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-29007","date":"2026-10-08","epss":0.06079,"percentile":0.93223}],"risk":4.650435,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-29007","description":"Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`."},"relatedVulnerabilities":[{"id":"CVE-2023-29007","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29007","cwe":"CWE-74","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-29007","date":"2026-10-08","epss":0.06079,"percentile":0.93223}],"urls":["https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt","https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4","https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/","https://security.gentoo.org/glsa/202312-15","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-29007","description":"Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`."}]},{"artifact":{"id":"64d1fb374de95eb2","cpes":["cpe:2.3:a:git-man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git-man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git-man","purl":"pkg:deb/debian/git-man@1%3A2.30.2-1%2Bdeb11u2?arch=all&distro=debian-11.7&upstream=git","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git-man/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git-man/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.list"}],"upstreams":[{"name":"git"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-29007","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-29007","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29007","cwe":"CWE-74","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-29007","date":"2026-10-08","epss":0.06079,"percentile":0.93223}],"risk":4.650435,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-29007","description":"Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`."},"relatedVulnerabilities":[{"id":"CVE-2023-29007","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29007","cwe":"CWE-74","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-29007","date":"2026-10-08","epss":0.06079,"percentile":0.93223}],"urls":["https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt","https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4","https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/","https://security.gentoo.org/glsa/202312-15","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-29007","description":"Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`."}]},{"artifact":{"id":"a0f5d0ed20be6365","cpes":["cpe:2.3:a:apache:httpclient:4.0.1:*:*:*:*:*:*:*"],"name":"httpclient","purl":"pkg:maven/org.apache.httpcomponents/httpclient@4.0.1","type":"java-archive","version":"4.0.1","language":"java","licenses":["Apache-2.0","CC-BY-2.5"],"metadata":{"pomGroupID":"org.apache.httpcomponents","virtualPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/httpclient-4.0.1.jar","manifestName":"","pomArtifactID":"httpclient","archiveDigests":[{"value":"1d7d28fa738bdbfe4fbd895d9486308999bdf440","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/google-login.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/httpclient-4.0.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.3.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cfh5-3ghh-wfjx","versionConstraint":"<4.3.5 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.httpcomponents:httpclient","version":"4.0.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-cfh5-3ghh-wfjx","fix":{"state":"fixed","versions":["4.3.5"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"4.3.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2014-3577","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-3577","date":"2026-10-08","epss":0.09189,"percentile":0.95215}],"risk":4.5945,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2014-3577","https://access.redhat.com/solutions/1165533","https://exchange.xforce.ibmcloud.com/vulnerabilities/95327","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E","http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html","http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html","http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html","http://rhn.redhat.com/errata/RHSA-2014-1146.html","http://rhn.redhat.com/errata/RHSA-2014-1166.html","http://rhn.redhat.com/errata/RHSA-2014-1833.html","http://rhn.redhat.com/errata/RHSA-2014-1834.html","http://rhn.redhat.com/errata/RHSA-2014-1835.html","http://rhn.redhat.com/errata/RHSA-2014-1836.html","http://rhn.redhat.com/errata/RHSA-2014-1891.html","http://rhn.redhat.com/errata/RHSA-2014-1892.html","http://rhn.redhat.com/errata/RHSA-2015-0125.html","http://rhn.redhat.com/errata/RHSA-2015-0158.html","http://rhn.redhat.com/errata/RHSA-2015-0675.html","http://rhn.redhat.com/errata/RHSA-2015-0720.html","http://rhn.redhat.com/errata/RHSA-2015-0765.html","http://rhn.redhat.com/errata/RHSA-2015-0850.html","http://rhn.redhat.com/errata/RHSA-2015-0851.html","http://rhn.redhat.com/errata/RHSA-2015-1176.html","http://rhn.redhat.com/errata/RHSA-2015-1177.html","http://rhn.redhat.com/errata/RHSA-2015-1888.html","http://rhn.redhat.com/errata/RHSA-2016-1773.html","http://rhn.redhat.com/errata/RHSA-2016-1931.html","http://seclists.org/fulldisclosure/2014/Aug/48","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.ubuntu.com/usn/USN-2769-1","http://www.openwall.com/lists/oss-security/2021/10/06/1","https://github.com/apache/httpcomponents-client/commit/51cc67567765d67f878f0dcef61b5ded454d3122","https://security.netapp.com/advisory/ntap-20231027-0003","https://svn.apache.org/viewvc?view=revision&revision=1614064"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cfh5-3ghh-wfjx","description":"Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient"},"relatedVulnerabilities":[{"id":"CVE-2014-3577","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2014-3577","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-3577","date":"2026-10-08","epss":0.09189,"percentile":0.95215}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html","http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html","http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html","http://rhn.redhat.com/errata/RHSA-2014-1146.html","http://rhn.redhat.com/errata/RHSA-2014-1166.html","http://rhn.redhat.com/errata/RHSA-2014-1833.html","http://rhn.redhat.com/errata/RHSA-2014-1834.html","http://rhn.redhat.com/errata/RHSA-2014-1835.html","http://rhn.redhat.com/errata/RHSA-2014-1836.html","http://rhn.redhat.com/errata/RHSA-2014-1891.html","http://rhn.redhat.com/errata/RHSA-2014-1892.html","http://rhn.redhat.com/errata/RHSA-2015-0125.html","http://rhn.redhat.com/errata/RHSA-2015-0158.html","http://rhn.redhat.com/errata/RHSA-2015-0675.html","http://rhn.redhat.com/errata/RHSA-2015-0720.html","http://rhn.redhat.com/errata/RHSA-2015-0765.html","http://rhn.redhat.com/errata/RHSA-2015-0850.html","http://rhn.redhat.com/errata/RHSA-2015-0851.html","http://rhn.redhat.com/errata/RHSA-2015-1176.html","http://rhn.redhat.com/errata/RHSA-2015-1177.html","http://rhn.redhat.com/errata/RHSA-2015-1888.html","http://rhn.redhat.com/errata/RHSA-2016-1773.html","http://rhn.redhat.com/errata/RHSA-2016-1931.html","http://seclists.org/fulldisclosure/2014/Aug/48","http://secunia.com/advisories/60466","http://secunia.com/advisories/60589","http://secunia.com/advisories/60713","http://www.openwall.com/lists/oss-security/2021/10/06/1","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.osvdb.org/110143","http://www.securityfocus.com/bid/69258","http://www.securitytracker.com/id/1030812","http://www.ubuntu.com/usn/USN-2769-1","https://access.redhat.com/solutions/1165533","https://exchange.xforce.ibmcloud.com/vulnerabilities/95327","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05363782","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E","https://security.netapp.com/advisory/ntap-20231027-0003/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2014-3577","description":"org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field."}]},{"artifact":{"id":"c3466eb679e28aa6","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A8.4p1-5%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=openssh","type":"deb","version":"1:8.4p1-5+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Beer-ware","Expat-with-advertising-restriction","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-client/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:8.4p1-5+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-26465","versionConstraint":"< 1:8.4p1-5+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssh","version":"1:8.4p1-5+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-26465","fix":{"state":"fixed","versions":["1:8.4p1-5+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:8.4p1-5+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-26465","cwe":"CWE-390","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-26465","date":"2026-10-08","epss":0.07723,"percentile":0.94476}],"risk":4.55657,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-26465","description":"A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high."},"relatedVulnerabilities":[{"id":"CVE-2025-26465","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-26465","cwe":"CWE-390","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-26465","date":"2026-10-08","epss":0.07723,"percentile":0.94476}],"urls":["https://access.redhat.com/errata/RHSA-2025:16823","https://access.redhat.com/errata/RHSA-2025:3837","https://access.redhat.com/errata/RHSA-2025:6993","https://access.redhat.com/errata/RHSA-2025:8385","https://access.redhat.com/security/cve/CVE-2025-26465","https://access.redhat.com/solutions/7109879","https://bugzilla.redhat.com/show_bug.cgi?id=2344780","https://seclists.org/oss-sec/2025/q1/144","http://seclists.org/fulldisclosure/2025/Feb/18","http://seclists.org/fulldisclosure/2025/May/7","http://seclists.org/fulldisclosure/2025/May/8","https://blog.qualys.com/vulnerabilities-threat-research/2025/02/18/qualys-tru-discovers-two-vulnerabilities-in-openssh-cve-2025-26465-cve-2025-26466","https://bugzilla.suse.com/show_bug.cgi?id=1237040","https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/008_ssh.patch.sig","https://lists.debian.org/debian-lts-announce/2025/02/msg00020.html","https://lists.mindrot.org/pipermail/openssh-unix-announce/2025-February/000161.html","https://security-tracker.debian.org/tracker/CVE-2025-26465","https://security.netapp.com/advisory/ntap-20250228-0003/","https://ubuntu.com/security/CVE-2025-26465","https://www.openssh.com/releasenotes.html#9.9p2","https://www.openwall.com/lists/oss-security/2025/02/18/1","https://www.openwall.com/lists/oss-security/2025/02/18/4","https://www.theregister.com/2025/02/18/openssh_vulnerabilities_mitm_dos/","https://www.vicarius.io/vsociety/posts/cve-2025-26465-detect-vulnerable-openssh","https://www.vicarius.io/vsociety/posts/cve-2025-26465-mitigate-vulnerable-openssh","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-585531.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-26465","description":"A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high."}]},{"artifact":{"id":"a0f5d0ed20be6365","cpes":["cpe:2.3:a:apache:httpclient:4.0.1:*:*:*:*:*:*:*"],"name":"httpclient","purl":"pkg:maven/org.apache.httpcomponents/httpclient@4.0.1","type":"java-archive","version":"4.0.1","language":"java","licenses":["Apache-2.0","CC-BY-2.5"],"metadata":{"pomGroupID":"org.apache.httpcomponents","virtualPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/httpclient-4.0.1.jar","manifestName":"","pomArtifactID":"httpclient","archiveDigests":[{"value":"1d7d28fa738bdbfe4fbd895d9486308999bdf440","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/google-login.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/httpclient-4.0.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2x83-r56g-cv47","versionConstraint":"<4.2.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.httpcomponents:httpclient","version":"4.0.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-2x83-r56g-cv47","fix":{"state":"fixed","versions":["4.2.3"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"4.2.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2012-6153","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2012-6153","date":"2026-10-08","epss":0.05844,"percentile":0.9299}],"risk":4.383,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2012-6153","https://access.redhat.com/solutions/1165533","https://bugzilla.redhat.com/show_bug.cgi?id=1129916","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564","http://rhn.redhat.com/errata/RHSA-2014-1098.html","http://rhn.redhat.com/errata/RHSA-2014-1833.html","http://rhn.redhat.com/errata/RHSA-2014-1834.html","http://rhn.redhat.com/errata/RHSA-2014-1835.html","http://rhn.redhat.com/errata/RHSA-2014-1836.html","http://rhn.redhat.com/errata/RHSA-2014-1891.html","http://rhn.redhat.com/errata/RHSA-2014-1892.html","http://rhn.redhat.com/errata/RHSA-2015-0125.html","http://rhn.redhat.com/errata/RHSA-2015-0158.html","http://rhn.redhat.com/errata/RHSA-2015-0675.html","http://rhn.redhat.com/errata/RHSA-2015-0720.html","http://rhn.redhat.com/errata/RHSA-2015-0765.html","http://rhn.redhat.com/errata/RHSA-2015-0850.html","http://rhn.redhat.com/errata/RHSA-2015-0851.html","http://rhn.redhat.com/errata/RHSA-2015-1888.html","http://svn.apache.org/viewvc?view=revision&revision=1411705","http://www.ubuntu.com/usn/USN-2769-1","https://github.com/apache/httpcomponents-client/commit/6e14fc146a66e0f3eb362f45f95d1a58ee18886a","https://github.com/apache/httpcomponents-client/commit/b930227f907af1198765fc47beabbddae344ca7b"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2x83-r56g-cv47","description":"Improper certificate validation in org.apache.httpcomponents:httpclient"},"relatedVulnerabilities":[{"id":"CVE-2012-6153","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2012-6153","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2012-6153","date":"2026-10-08","epss":0.05844,"percentile":0.9299}],"urls":["http://rhn.redhat.com/errata/RHSA-2014-1098.html","http://rhn.redhat.com/errata/RHSA-2014-1833.html","http://rhn.redhat.com/errata/RHSA-2014-1834.html","http://rhn.redhat.com/errata/RHSA-2014-1835.html","http://rhn.redhat.com/errata/RHSA-2014-1836.html","http://rhn.redhat.com/errata/RHSA-2014-1891.html","http://rhn.redhat.com/errata/RHSA-2014-1892.html","http://rhn.redhat.com/errata/RHSA-2015-0125.html","http://rhn.redhat.com/errata/RHSA-2015-0158.html","http://rhn.redhat.com/errata/RHSA-2015-0675.html","http://rhn.redhat.com/errata/RHSA-2015-0720.html","http://rhn.redhat.com/errata/RHSA-2015-0765.html","http://rhn.redhat.com/errata/RHSA-2015-0850.html","http://rhn.redhat.com/errata/RHSA-2015-0851.html","http://rhn.redhat.com/errata/RHSA-2015-1888.html","http://svn.apache.org/viewvc?view=revision&revision=1411705","http://www.securityfocus.com/bid/69257","http://www.ubuntu.com/usn/USN-2769-1","https://access.redhat.com/solutions/1165533","https://bugzilla.redhat.com/show_bug.cgi?id=1129916","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2012-6153","description":"http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field.  NOTE: this issue exists because of an incomplete fix for CVE-2012-5783."}]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2011-3389","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2011-3389","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2011-3389","cwe":"CWE-326","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2011-3389","date":"2026-10-08","epss":0.73327,"percentile":0.99453}],"risk":3.66635,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2011-3389","description":"The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack."},"relatedVulnerabilities":[{"id":"CVE-2011-3389","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2011-3389","cwe":"CWE-326","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2011-3389","date":"2026-10-08","epss":0.73327,"percentile":0.99453}],"urls":["http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/","http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx","http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx","http://curl.haxx.se/docs/adv_20120124B.html","http://downloads.asterisk.org/pub/security/AST-2016-001.html","http://ekoparty.org/2011/juliano-rizzo.php","http://eprint.iacr.org/2004/111","http://eprint.iacr.org/2006/136","http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html","http://isc.sans.edu/diary/SSL+TLS+part+3+/11635","http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html","http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html","http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html","http://lists.apple.com/archives/security-announce/2012/May/msg00001.html","http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html","http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html","http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html","http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html","http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://marc.info/?l=bugtraq&m=132750579901589&w=2","http://marc.info/?l=bugtraq&m=132872385320240&w=2","http://marc.info/?l=bugtraq&m=133365109612558&w=2","http://marc.info/?l=bugtraq&m=133728004526190&w=2","http://marc.info/?l=bugtraq&m=134254866602253&w=2","http://marc.info/?l=bugtraq&m=134254957702612&w=2","http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue","http://osvdb.org/74829","http://rhn.redhat.com/errata/RHSA-2012-0508.html","http://rhn.redhat.com/errata/RHSA-2013-1455.html","http://secunia.com/advisories/45791","http://secunia.com/advisories/47998","http://secunia.com/advisories/48256","http://secunia.com/advisories/48692","http://secunia.com/advisories/48915","http://secunia.com/advisories/48948","http://secunia.com/advisories/49198","http://secunia.com/advisories/55322","http://secunia.com/advisories/55350","http://secunia.com/advisories/55351","http://security.gentoo.org/glsa/glsa-201203-02.xml","http://security.gentoo.org/glsa/glsa-201406-32.xml","http://support.apple.com/kb/HT4999","http://support.apple.com/kb/HT5001","http://support.apple.com/kb/HT5130","http://support.apple.com/kb/HT5281","http://support.apple.com/kb/HT5501","http://support.apple.com/kb/HT6150","http://technet.microsoft.com/security/advisory/2588513","http://vnhacker.blogspot.com/2011/09/beast.html","http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf","http://www.debian.org/security/2012/dsa-2398","http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html","http://www.ibm.com/developerworks/java/jdk/alerts/","http://www.imperialviolet.org/2011/09/23/chromeandbeast.html","http://www.insecure.cl/Beast-SSL.rar","http://www.kb.cert.org/vuls/id/864643","http://www.mandriva.com/security/advisories?name=MDVSA-2012:058","http://www.opera.com/docs/changelogs/mac/1151/","http://www.opera.com/docs/changelogs/mac/1160/","http://www.opera.com/docs/changelogs/unix/1151/","http://www.opera.com/docs/changelogs/unix/1160/","http://www.opera.com/docs/changelogs/windows/1151/","http://www.opera.com/docs/changelogs/windows/1160/","http://www.opera.com/support/kb/view/1004/","http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html","http://www.redhat.com/support/errata/RHSA-2011-1384.html","http://www.redhat.com/support/errata/RHSA-2012-0006.html","http://www.securityfocus.com/bid/49388","http://www.securityfocus.com/bid/49778","http://www.securitytracker.com/id/1029190","http://www.securitytracker.com/id?1025997","http://www.securitytracker.com/id?1026103","http://www.securitytracker.com/id?1026704","http://www.ubuntu.com/usn/USN-1263-1","http://www.us-cert.gov/cas/techalerts/TA12-010A.html","https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail","https://bugzilla.novell.com/show_bug.cgi?id=719047","https://bugzilla.redhat.com/show_bug.cgi?id=737506","https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf","https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006","https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862","https://hermes.opensuse.org/messages/13154861","https://hermes.opensuse.org/messages/13155432","https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14752"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2011-3389","description":"The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack."}]},{"artifact":{"id":"af7d166c6d421afa","cpes":["cpe:2.3:a:git:git:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git","purl":"pkg:deb/debian/git@1%3A2.30.2-1%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.list"},{"path":"/var/lib/dpkg/info/git.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postinst"},{"path":"/var/lib/dpkg/info/git.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postrm"},{"path":"/var/lib/dpkg/info/git.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.preinst"},{"path":"/var/lib/dpkg/info/git.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-1387","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2019-1387","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-1387","date":"2026-10-08","epss":0.04426,"percentile":0.91121}],"risk":3.6071900000000006,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1387","description":"An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones."},"relatedVulnerabilities":[{"id":"CVE-2019-1387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-1387","date":"2026-10-08","epss":0.04426,"percentile":0.91121}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html","http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html","https://access.redhat.com/errata/RHSA-2019:4356","https://access.redhat.com/errata/RHSA-2020:0002","https://access.redhat.com/errata/RHSA-2020:0124","https://access.redhat.com/errata/RHSA-2020:0228","https://lists.debian.org/debian-lts-announce/2020/01/msg00019.html","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6UGTEOXWIYSM5KDZL74QD2GK6YQNQCP/","https://lore.kernel.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com/T/#u","https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com/","https://security.gentoo.org/glsa/202003-30","https://security.gentoo.org/glsa/202003-42","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1387","description":"An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones."}]},{"artifact":{"id":"64d1fb374de95eb2","cpes":["cpe:2.3:a:git-man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git-man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git-man","purl":"pkg:deb/debian/git-man@1%3A2.30.2-1%2Bdeb11u2?arch=all&distro=debian-11.7&upstream=git","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git-man/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git-man/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.list"}],"upstreams":[{"name":"git"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1387","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2019-1387","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-1387","date":"2026-10-08","epss":0.04426,"percentile":0.91121}],"risk":3.6071900000000006,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1387","description":"An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones."},"relatedVulnerabilities":[{"id":"CVE-2019-1387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-1387","date":"2026-10-08","epss":0.04426,"percentile":0.91121}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html","http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html","https://access.redhat.com/errata/RHSA-2019:4356","https://access.redhat.com/errata/RHSA-2020:0002","https://access.redhat.com/errata/RHSA-2020:0124","https://access.redhat.com/errata/RHSA-2020:0228","https://lists.debian.org/debian-lts-announce/2020/01/msg00019.html","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6UGTEOXWIYSM5KDZL74QD2GK6YQNQCP/","https://lore.kernel.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com/T/#u","https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com/","https://security.gentoo.org/glsa/202003-30","https://security.gentoo.org/glsa/202003-42","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1387","description":"An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones."}]},{"artifact":{"id":"c103c066c49ae324","cpes":["cpe:2.3:a:golang:networking:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2","type":"go-module","version":"v0.0.0-20211112202133-69e39bad7dc2","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.7.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vvpx-j8f3-3w6h","versionConstraint":"<0.7.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.0.0-20211112202133-69e39bad7dc2"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-vvpx-j8f3-3w6h","fix":{"state":"fixed","versions":["0.7.0"],"available":[{"date":"2023-02-18","kind":"first-observed","version":"0.7.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41723","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41723","date":"2026-10-08","epss":0.04561,"percentile":0.91357}],"risk":3.42075,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-41723","https://go.dev/cl/468135","https://go.dev/issue/57855","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E","https://vuln.go.dev/ID/GO-2023-1571.json","https://go.dev/cl/468295","https://pkg.go.dev/vuln/GO-2023-1571","https://security.gentoo.org/glsa/202311-09","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE","https://www.couchbase.com/alerts"],"severity":"High","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vvpx-j8f3-3w6h","description":"golang.org/x/net vulnerable to Uncontrolled Resource Consumption"},"relatedVulnerabilities":[{"id":"CVE-2022-41723","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41723","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41723","date":"2026-10-08","epss":0.04561,"percentile":0.91357}],"urls":["https://go.dev/cl/468135","https://go.dev/cl/468295","https://go.dev/issue/57855","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE/","https://pkg.go.dev/vuln/GO-2023-1571","https://security.gentoo.org/glsa/202311-09","https://www.couchbase.com/alerts/","https://security.netapp.com/advisory/ntap-20230331-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41723","description":"A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1571","versionConstraint":"<1.19.6||>=1.20.0-0,<1.20.1 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1571","fix":{"state":"fixed","versions":["1.19.6","1.20.1"],"available":[{"date":"2023-02-14","kind":"release","version":"1.19.6"},{"date":"2023-02-14","kind":"release","version":"1.20.1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41723","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41723","date":"2026-10-08","epss":0.04561,"percentile":0.91357}],"risk":3.42075,"urls":["https://go.dev/cl/468135","https://go.dev/cl/468295","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/57855","description":"A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests."},"relatedVulnerabilities":[{"id":"CVE-2022-41723","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41723","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41723","date":"2026-10-08","epss":0.04561,"percentile":0.91357}],"urls":["https://go.dev/cl/468135","https://go.dev/cl/468295","https://go.dev/issue/57855","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE/","https://pkg.go.dev/vuln/GO-2023-1571","https://security.gentoo.org/glsa/202311-09","https://www.couchbase.com/alerts/","https://security.netapp.com/advisory/ntap-20230331-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41723","description":"A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests."},{"id":"GHSA-vvpx-j8f3-3w6h","cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41723","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41723","date":"2026-10-08","epss":0.04561,"percentile":0.91357}],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-41723","https://go.dev/cl/468135","https://go.dev/issue/57855","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E","https://vuln.go.dev/ID/GO-2023-1571.json","https://go.dev/cl/468295","https://pkg.go.dev/vuln/GO-2023-1571","https://security.gentoo.org/glsa/202311-09","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE","https://www.couchbase.com/alerts"],"severity":"High","namespace":"github:language:go","dataSource":"https://github.com/advisories/GHSA-vvpx-j8f3-3w6h","description":"golang.org/x/net vulnerable to Uncontrolled Resource Consumption"}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1v-0~deb11u1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-3446","versionConstraint":"< 1.1.1v-0~deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-3446","fix":{"state":"fixed","versions":["1.1.1v-0~deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1v-0~deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3446","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3446","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3446","date":"2026-10-08","epss":0.06531,"percentile":0.93621}],"risk":3.363465,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-3446","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.  Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.  The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ('p' parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length.  However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large.  An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulernable to a Denial of Service attack.  The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check().  Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the '-check' option.  The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2023-3446","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3446","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3446","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3446","date":"2026-10-08","epss":0.06531,"percentile":0.93621}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23","https://www.openssl.org/news/secadv/20230719.txt","http://www.openwall.com/lists/oss-security/2023/07/19/4","http://www.openwall.com/lists/oss-security/2023/07/19/5","http://www.openwall.com/lists/oss-security/2023/07/19/6","http://www.openwall.com/lists/oss-security/2023/07/31/1","http://www.openwall.com/lists/oss-security/2024/05/16/1","https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230803-0011/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3446","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1v-0~deb11u1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-3446","versionConstraint":"< 1.1.1v-0~deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-3446","fix":{"state":"fixed","versions":["1.1.1v-0~deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1v-0~deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3446","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3446","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3446","date":"2026-10-08","epss":0.06531,"percentile":0.93621}],"risk":3.363465,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-3446","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.  Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.  The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ('p' parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length.  However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large.  An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulernable to a Denial of Service attack.  The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check().  Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the '-check' option.  The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2023-3446","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3446","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3446","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3446","date":"2026-10-08","epss":0.06531,"percentile":0.93621}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23","https://www.openssl.org/news/secadv/20230719.txt","http://www.openwall.com/lists/oss-security/2023/07/19/4","http://www.openwall.com/lists/oss-security/2023/07/19/5","http://www.openwall.com/lists/oss-security/2023/07/19/6","http://www.openwall.com/lists/oss-security/2023/07/31/1","http://www.openwall.com/lists/oss-security/2024/05/16/1","https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230803-0011/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3446","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"a0f5d0ed20be6365","cpes":["cpe:2.3:a:apache:httpclient:4.0.1:*:*:*:*:*:*:*"],"name":"httpclient","purl":"pkg:maven/org.apache.httpcomponents/httpclient@4.0.1","type":"java-archive","version":"4.0.1","language":"java","licenses":["Apache-2.0","CC-BY-2.5"],"metadata":{"pomGroupID":"org.apache.httpcomponents","virtualPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/httpclient-4.0.1.jar","manifestName":"","pomArtifactID":"httpclient","archiveDigests":[{"value":"1d7d28fa738bdbfe4fbd895d9486308999bdf440","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/google-login.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/httpclient-4.0.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.1.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gw85-4gmf-m7rh","versionConstraint":">=4.0.0,<4.1.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.httpcomponents:httpclient","version":"4.0.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-gw85-4gmf-m7rh","fix":{"state":"fixed","versions":["4.1.1"],"available":[{"date":"2022-07-14","kind":"first-observed","version":"4.1.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2011-1498","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2011-1498","date":"2026-10-08","epss":0.06685,"percentile":0.93735}],"risk":3.3425000000000002,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2011-1498","https://bugzilla.redhat.com/show_bug.cgi?id=709531","https://issues.apache.org/jira/browse/HTTPCLIENT-1061","http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061440.html","http://marc.info/?l=httpclient-users&m=129853896315461&w=2","http://marc.info/?l=httpclient-users&m=129856318011586&w=2","http://marc.info/?l=httpclient-users&m=129857589129183&w=2","http://marc.info/?l=httpclient-users&m=129858274406594&w=2","http://marc.info/?l=httpclient-users&m=129858299106950&w=2","http://openwall.com/lists/oss-security/2011/04/07/7","http://openwall.com/lists/oss-security/2011/04/08/1","http://securityreason.com/securityalert/8298","https://github.com/apache/httpcomponents-client/commit/a572756592c969affd0ce87885724e74839176fb"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gw85-4gmf-m7rh","description":"Exposure of Sensitive Information to an Unauthorized Actor in Apache HttpClient"},"relatedVulnerabilities":[{"id":"CVE-2011-1498","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2011-1498","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2011-1498","date":"2026-10-08","epss":0.06685,"percentile":0.93735}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061440.html","http://marc.info/?l=httpclient-users&m=129853896315461&w=2","http://marc.info/?l=httpclient-users&m=129856318011586&w=2","http://marc.info/?l=httpclient-users&m=129857589129183&w=2","http://marc.info/?l=httpclient-users&m=129858274406594&w=2","http://marc.info/?l=httpclient-users&m=129858299106950&w=2","http://openwall.com/lists/oss-security/2011/04/07/7","http://openwall.com/lists/oss-security/2011/04/08/1","http://securityreason.com/securityalert/8298","http://www.apache.org/dist/httpcomponents/httpclient/RELEASE_NOTES-4.1.x.txt","http://www.kb.cert.org/vuls/id/153049","http://www.securityfocus.com/bid/46974","https://bugzilla.redhat.com/show_bug.cgi?id=709531","https://issues.apache.org/jira/browse/HTTPCLIENT-1061"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2011-1498","description":"Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header."}]},{"artifact":{"id":"c103c066c49ae324","cpes":["cpe:2.3:a:golang:networking:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2","type":"go-module","version":"v0.0.0-20211112202133-69e39bad7dc2","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.4.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-xrjj-mj9h-534m","versionConstraint":"<0.4.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.0.0-20211112202133-69e39bad7dc2"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-xrjj-mj9h-534m","fix":{"state":"fixed","versions":["0.4.0"],"available":[{"date":"2024-05-21","kind":"first-observed","version":"0.4.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41717","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41717","date":"2026-10-08","epss":0.06077,"percentile":0.93221}],"risk":3.129655,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-41717","https://go.dev/cl/455635","https://go.dev/cl/455717","https://go.dev/issue/56350","https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ","https://pkg.go.dev/vuln/GO-2022-1144","https://security.gentoo.org/glsa/202311-09","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WPEIZ7AMEJCZXU3FEJZMVRNHQZXX5P3I","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QBKBAZBIOXZV5QCFHZNSVXULR32XJCYD","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q52IQI754YAE4XPR4QBRWPIVZWYGZ4FS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PW3XC47AUW5J5M2ULJX7WCCL3B2ETLMT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PUM4DIVOLJCBK5ZDP4LJOL24GXT3YSIR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NQGNAXK3YBPMUP3J4TECIRDHFGW37522","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSVIS6MTMFVBA7JPMRAUNKUOYEVSJYSB","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANIOPUXWIHVRA6CEWXCGOMX3YYS6KFHG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56B2FFESRYYP6IY2AZ3UWXLWKZ5IYZN4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SBIUECMLNC572P23DDOKJNKPJVX26SP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2"],"severity":"Medium","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-xrjj-mj9h-534m","description":"golang.org/x/net/http2 vulnerable to possible excessive memory growth"},"relatedVulnerabilities":[{"id":"CVE-2022-41717","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41717","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41717","date":"2026-10-08","epss":0.06077,"percentile":0.93221}],"urls":["https://go.dev/cl/455635","https://go.dev/cl/455717","https://go.dev/issue/56350","https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SBIUECMLNC572P23DDOKJNKPJVX26SP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56B2FFESRYYP6IY2AZ3UWXLWKZ5IYZN4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANIOPUXWIHVRA6CEWXCGOMX3YYS6KFHG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSVIS6MTMFVBA7JPMRAUNKUOYEVSJYSB/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NQGNAXK3YBPMUP3J4TECIRDHFGW37522/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PUM4DIVOLJCBK5ZDP4LJOL24GXT3YSIR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PW3XC47AUW5J5M2ULJX7WCCL3B2ETLMT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q52IQI754YAE4XPR4QBRWPIVZWYGZ4FS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QBKBAZBIOXZV5QCFHZNSVXULR32XJCYD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WPEIZ7AMEJCZXU3FEJZMVRNHQZXX5P3I/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/","https://pkg.go.dev/vuln/GO-2022-1144","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20230120-0008/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41717","description":"An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2022-1144","versionConstraint":"<1.18.9||>=1.19.0-0,<1.19.4 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2022-1144","fix":{"state":"fixed","versions":["1.18.9","1.19.4"],"available":[{"date":"2022-12-06","kind":"release","version":"1.18.9"},{"date":"2022-12-06","kind":"release","version":"1.19.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41717","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41717","date":"2026-10-08","epss":0.06077,"percentile":0.93221}],"risk":3.129655,"urls":["https://go.dev/cl/455717","https://go.dev/cl/455635","https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/56350","description":"An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.\n\nHTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection."},"relatedVulnerabilities":[{"id":"CVE-2022-41717","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41717","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41717","date":"2026-10-08","epss":0.06077,"percentile":0.93221}],"urls":["https://go.dev/cl/455635","https://go.dev/cl/455717","https://go.dev/issue/56350","https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SBIUECMLNC572P23DDOKJNKPJVX26SP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56B2FFESRYYP6IY2AZ3UWXLWKZ5IYZN4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANIOPUXWIHVRA6CEWXCGOMX3YYS6KFHG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSVIS6MTMFVBA7JPMRAUNKUOYEVSJYSB/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NQGNAXK3YBPMUP3J4TECIRDHFGW37522/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PUM4DIVOLJCBK5ZDP4LJOL24GXT3YSIR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PW3XC47AUW5J5M2ULJX7WCCL3B2ETLMT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q52IQI754YAE4XPR4QBRWPIVZWYGZ4FS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QBKBAZBIOXZV5QCFHZNSVXULR32XJCYD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WPEIZ7AMEJCZXU3FEJZMVRNHQZXX5P3I/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/","https://pkg.go.dev/vuln/GO-2022-1144","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20230120-0008/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41717","description":"An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection."},{"id":"GHSA-xrjj-mj9h-534m","cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41717","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41717","date":"2026-10-08","epss":0.06077,"percentile":0.93221}],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-41717","https://go.dev/cl/455635","https://go.dev/cl/455717","https://go.dev/issue/56350","https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ","https://pkg.go.dev/vuln/GO-2022-1144","https://security.gentoo.org/glsa/202311-09","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WPEIZ7AMEJCZXU3FEJZMVRNHQZXX5P3I","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QBKBAZBIOXZV5QCFHZNSVXULR32XJCYD","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q52IQI754YAE4XPR4QBRWPIVZWYGZ4FS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PW3XC47AUW5J5M2ULJX7WCCL3B2ETLMT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PUM4DIVOLJCBK5ZDP4LJOL24GXT3YSIR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NQGNAXK3YBPMUP3J4TECIRDHFGW37522","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSVIS6MTMFVBA7JPMRAUNKUOYEVSJYSB","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ANIOPUXWIHVRA6CEWXCGOMX3YYS6KFHG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56B2FFESRYYP6IY2AZ3UWXLWKZ5IYZN4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4SBIUECMLNC572P23DDOKJNKPJVX26SP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2"],"severity":"Medium","namespace":"github:language:go","dataSource":"https://github.com/advisories/GHSA-xrjj-mj9h-534m","description":"golang.org/x/net/http2 vulnerable to possible excessive memory growth"}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45447","versionConstraint":"< 1.1.1w-0+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-45447","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u8"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"1.1.1w-0+deb11u8"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45447","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2026-45447","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-45447","date":"2026-10-08","epss":0.04002,"percentile":0.90276}],"risk":3.12156,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-45447","description":"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification.  Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution.  When processing a PKCS#7 or S/MIME signed message, if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent use of the BIO by the calling application results in a use-after-free condition.  In the common case this occurs when the application later calls BIO_free() on the BIO originally passed to PKCS7_verify(). Depending on allocator behavior and application-specific BIO usage patterns, this may result in a crash or other memory corruption. In some application contexts this may potentially be exploitable for remote code execution.  Applications that process PKCS#7 or S/MIME signed messages using OpenSSL PKCS#7 APIs may be affected. Applications using the CMS APIs for this processing are not affected.  The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-45447","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45447","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2026-45447","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-45447","date":"2026-10-08","epss":0.04002,"percentile":0.90276}],"urls":["https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c","https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8","https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54","https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c","https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e","https://openssl-library.org/news/secadv/20260609.txt","https://access.redhat.com/errata/RHSA-2026:25237","https://access.redhat.com/errata/RHSA-2026:25239","https://access.redhat.com/errata/RHSA-2026:26275","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:34102","https://access.redhat.com/errata/RHSA-2026:35869","https://access.redhat.com/errata/RHSA-2026:36215","https://access.redhat.com/errata/RHSA-2026:36217","https://access.redhat.com/errata/RHSA-2026:39009","https://access.redhat.com/errata/RHSA-2026:39012","https://access.redhat.com/errata/RHSA-2026:39981","https://access.redhat.com/errata/RHSA-2026:44438","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:47737","https://access.redhat.com/errata/RHSA-2026:58563","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:66524","https://access.redhat.com/security/cve/CVE-2026-45447","https://bugzilla.redhat.com/show_bug.cgi?id=2481898","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45447","description":"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-45447","versionConstraint":"< 1.1.1w-0+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-45447","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u8"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"1.1.1w-0+deb11u8"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45447","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2026-45447","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-45447","date":"2026-10-08","epss":0.04002,"percentile":0.90276}],"risk":3.12156,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-45447","description":"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification.  Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution.  When processing a PKCS#7 or S/MIME signed message, if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent use of the BIO by the calling application results in a use-after-free condition.  In the common case this occurs when the application later calls BIO_free() on the BIO originally passed to PKCS7_verify(). Depending on allocator behavior and application-specific BIO usage patterns, this may result in a crash or other memory corruption. In some application contexts this may potentially be exploitable for remote code execution.  Applications that process PKCS#7 or S/MIME signed messages using OpenSSL PKCS#7 APIs may be affected. Applications using the CMS APIs for this processing are not affected.  The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-45447","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45447","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2026-45447","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-45447","date":"2026-10-08","epss":0.04002,"percentile":0.90276}],"urls":["https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c","https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8","https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54","https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c","https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e","https://openssl-library.org/news/secadv/20260609.txt","https://access.redhat.com/errata/RHSA-2026:25237","https://access.redhat.com/errata/RHSA-2026:25239","https://access.redhat.com/errata/RHSA-2026:26275","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:34102","https://access.redhat.com/errata/RHSA-2026:35869","https://access.redhat.com/errata/RHSA-2026:36215","https://access.redhat.com/errata/RHSA-2026:36217","https://access.redhat.com/errata/RHSA-2026:39009","https://access.redhat.com/errata/RHSA-2026:39012","https://access.redhat.com/errata/RHSA-2026:39981","https://access.redhat.com/errata/RHSA-2026:44438","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:47737","https://access.redhat.com/errata/RHSA-2026:58563","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:66524","https://access.redhat.com/security/cve/CVE-2026-45447","https://bugzilla.redhat.com/show_bug.cgi?id=2481898","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45447","description":"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"21eba376b06d560f","cpes":["cpe:2.3:a:org.springframework:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_web:5.3.27:*:*:*:*:*:*:*"],"name":"spring-web","purl":"pkg:maven/org.springframework/spring-web@5.3.27","type":"java-archive","version":"5.3.27","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-web-5.3.27.jar","manifestName":"","pomArtifactID":"spring-web","archiveDigests":[{"value":"a51c45a8602052a2a90f7e645a47ba8df1547795","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-web-5.3.27.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.3.32"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-ccgv-vj62-xf9h","versionConstraint":">=5.3.0,<5.3.32 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-web","version":"5.3.27"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-ccgv-vj62-xf9h","fix":{"state":"fixed","versions":["5.3.32"],"available":[{"date":"2024-02-25","kind":"first-observed","version":"5.3.32"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22243","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22243","date":"2026-10-08","epss":0.03967,"percentile":0.9019}],"risk":3.09426,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-22243","https://spring.io/security/cve-2024-22243","https://github.com/spring-projects/spring-framework/blob/main/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java","https://security.netapp.com/advisory/ntap-20240524-0001","http://seclists.org/fulldisclosure/2024/Sep/24"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-ccgv-vj62-xf9h","description":"Spring Web vulnerable to Open Redirect or Server Side Request Forgery"},"relatedVulnerabilities":[{"id":"CVE-2024-22243","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22243","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22243","date":"2026-10-08","epss":0.03967,"percentile":0.9019}],"urls":["https://security.netapp.com/advisory/ntap-20240524-0001/","https://spring.io/security/cve-2024-22243","http://seclists.org/fulldisclosure/2024/Sep/24"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22243","description":"Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks."}]},{"artifact":{"id":"c103c066c49ae324","cpes":["cpe:2.3:a:golang:networking:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2","type":"go-module","version":"v0.0.0-20211112202133-69e39bad7dc2","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.0.0-20211209124913-491a49abca63"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2022-0288","versionConstraint":"<0.0.0-20211209124913-491a49abca63 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.0.0-20211112202133-69e39bad7dc2"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2022-0288","fix":{"state":"fixed","versions":["0.0.0-20211209124913-491a49abca63"],"available":[{"date":"2021-12-09","kind":"release","version":"0.0.0-20211209124913-491a49abca63"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-44716","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-44716","date":"2026-10-08","epss":0.03958,"percentile":0.90166}],"risk":2.9684999999999997,"urls":["https://go.dev/issue/50058","https://groups.google.com/g/golang-announce/c/hcmEScgc00k"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/369794","description":"An attacker can cause unbounded memory growth in servers accepting HTTP/2 requests."},"relatedVulnerabilities":[{"id":"CVE-2021-44716","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-44716","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-44716","date":"2026-10-08","epss":0.03958,"percentile":0.90166}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf","https://groups.google.com/g/golang-announce/c/hcmEScgc00k","https://lists.debian.org/debian-lts-announce/2022/01/msg00016.html","https://lists.debian.org/debian-lts-announce/2022/01/msg00017.html","https://lists.debian.org/debian-lts-announce/2023/04/msg00021.html","https://security.gentoo.org/glsa/202208-02","https://security.netapp.com/advisory/ntap-20220121-0002/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-44716","description":"net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests."},{"id":"GHSA-vc3p-29h2-gpcp","cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-44716","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-44716","date":"2026-10-08","epss":0.03958,"percentile":0.90166}],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2021-44716","https://groups.google.com/g/golang-announce/c/hcmEScgc00k","https://security.netapp.com/advisory/ntap-20220121-0002/","https://lists.debian.org/debian-lts-announce/2022/01/msg00016.html","https://lists.debian.org/debian-lts-announce/2022/01/msg00017.html","https://security.gentoo.org/glsa/202208-02","https://go.dev/cl/369794","https://go.dev/issue/50058","https://pkg.go.dev/vuln/GO-2022-0288"],"severity":"High","namespace":"github:language:go","dataSource":"https://github.com/advisories/GHSA-vc3p-29h2-gpcp","description":"golang.org/x/net/http2 allows uncontrolled memory consumption"}]},{"artifact":{"id":"255a953ed0498414","cpes":["cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_0:3.34.1-3:*:*:*:*:*:*:*"],"name":"libsqlite3-0","purl":"pkg:deb/debian/libsqlite3-0@3.34.1-3?arch=amd64&distro=debian-11.7&upstream=sqlite3","type":"deb","version":"3.34.1-3","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-0/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libsqlite3-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.34.1-3+deb11u1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-36690","versionConstraint":"< 3.34.1-3+deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"sqlite3","version":"3.34.1-3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2021-36690","fix":{"state":"fixed","versions":["3.34.1-3+deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"3.34.1-3+deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2021-36690","date":"2026-10-08","epss":0.03898,"percentile":0.89989}],"risk":2.9235,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2021-36690","description":"A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library."},"relatedVulnerabilities":[{"id":"CVE-2021-36690","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2021-36690","date":"2026-10-08","epss":0.03898,"percentile":0.89989}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/39","http://seclists.org/fulldisclosure/2022/Oct/41","http://seclists.org/fulldisclosure/2022/Oct/47","http://seclists.org/fulldisclosure/2022/Oct/49","https://support.apple.com/kb/HT213446","https://support.apple.com/kb/HT213486","https://support.apple.com/kb/HT213487","https://support.apple.com/kb/HT213488","https://www.sqlite.org/forum/forumpost/718c0a8d17","https://lists.debian.org/debian-lts-announce/2024/09/msg00050.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-36690","description":"A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library."}]},{"artifact":{"id":"e974360838add45f","cpes":["cpe:2.3:a:golang:crypto:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4","type":"go-module","version":"v0.0.0-20220411220226-7b82a4e95df4","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.31.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-v778-237x-gjrc","versionConstraint":"<0.31.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.0.0-20220411220226-7b82a4e95df4"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-v778-237x-gjrc","fix":{"state":"fixed","versions":["0.31.0"],"available":[{"date":"2024-12-12","kind":"first-observed","version":"0.31.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-45337","date":"2026-10-08","epss":0.03181,"percentile":0.87682}],"risk":2.878805,"urls":["https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909","https://go.dev/cl/635315","https://go.dev/issue/70779","https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ","https://pkg.go.dev/vuln/GO-2024-3321","https://nvd.nist.gov/vuln/detail/CVE-2024-45337","http://www.openwall.com/lists/oss-security/2024/12/11/2","https://security.netapp.com/advisory/ntap-20250131-0007"],"severity":"Critical","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-v778-237x-gjrc","description":"Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto"},"relatedVulnerabilities":[{"id":"CVE-2024-45337","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-45337","date":"2026-10-08","epss":0.03181,"percentile":0.87682}],"urls":["https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909","https://go.dev/cl/635315","https://go.dev/issue/70779","https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ","https://pkg.go.dev/vuln/GO-2024-3321","http://www.openwall.com/lists/oss-security/2024/12/11/2","https://security.netapp.com/advisory/ntap-20250131-0007/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-45337","description":"Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that \"A call to this function does not guarantee that the key offered is in fact used to authenticate.\" Specifically, the SSH protocol allows clients to inquire about whether a public key is acceptable before proving control of the corresponding private key. PublicKeyCallback may be called with multiple keys, and the order in which the keys were provided cannot be used to infer which key the client successfully authenticated with, if any. Some applications, which store the key(s) passed to PublicKeyCallback (or derived information) and make security relevant determinations based on it once the connection is established, may make incorrect assumptions. For example, an attacker may send public keys A and B, and then authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B for which the attacker does not actually control the private key. Since this API is widely misused, as a partial mitigation golang.org/x/cry...@v0.31.0 enforces the property that, when successfully authenticating via public key, the last key passed to ServerConfig.PublicKeyCallback will be the key used to authenticate the connection. PublicKeyCallback will now be called multiple times with the same key, if necessary. Note that the client may still not control the last key passed to PublicKeyCallback if the connection is then authenticated with a different method, such as PasswordCallback, KeyboardInteractiveCallback, or NoClientAuth. Users should be using the Extensions field of the Permissions return value from the various authentication callbacks to record data associated with the authentication attempt instead of referencing external state. Once the connection is established the state corresponding to the successful authentication attempt can be retrieved via the ServerConn.Permissions field. Note that some third-party libraries misuse the Permissions type by sharing it across authentication attempts; users of third-party libraries should refer to the relevant projects for guidance."}]},{"artifact":{"id":"c103c066c49ae324","cpes":["cpe:2.3:a:golang:networking:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2","type":"go-module","version":"v0.0.0-20211112202133-69e39bad7dc2","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.17.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4374-p667-p6c8","versionConstraint":"<0.17.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.0.0-20211112202133-69e39bad7dc2"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-4374-p667-p6c8","fix":{"state":"fixed","versions":["0.17.0"],"available":[{"date":"2023-10-12","kind":"first-observed","version":"0.17.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39325","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-39325","date":"2026-10-08","epss":0.03796,"percentile":0.89716}],"risk":2.8470000000000004,"urls":["https://github.com/golang/go/issues/63417","https://go.dev/cl/534215","https://go.dev/cl/534235","https://go.dev/issue/63417","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://nvd.nist.gov/vuln/detail/CVE-2023-39325","https://pkg.go.dev/vuln/GO-2023-2102","https://security.gentoo.org/glsa/202311-09","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV","https://security.netapp.com/advisory/ntap-20231110-0008","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4"],"severity":"High","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4374-p667-p6c8","description":"HTTP/2 rapid reset can cause excessive work in net/http"},"relatedVulnerabilities":[{"id":"CVE-2023-39325","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39325","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-39325","date":"2026-10-08","epss":0.03796,"percentile":0.89716}],"urls":["https://go.dev/cl/534215","https://go.dev/cl/534235","https://go.dev/issue/63417","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/","https://pkg.go.dev/vuln/GO-2023-2102","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20231110-0008/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39325","description":"A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.20.10"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-2102","versionConstraint":"<1.20.10||>=1.21.0-0,<1.21.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-2102","fix":{"state":"fixed","versions":["1.20.10","1.21.3"],"available":[{"date":"2023-10-10","kind":"release","version":"1.20.10"},{"date":"2023-10-10","kind":"release","version":"1.21.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39325","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-39325","date":"2026-10-08","epss":0.03796,"percentile":0.89716}],"risk":2.8470000000000004,"urls":["https://go.dev/cl/534215","https://go.dev/cl/534235","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/63417","description":"A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing.\n\nWith the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection.\n\nThis issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2.\n\nThe default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function."},"relatedVulnerabilities":[{"id":"CVE-2023-39325","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39325","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-39325","date":"2026-10-08","epss":0.03796,"percentile":0.89716}],"urls":["https://go.dev/cl/534215","https://go.dev/cl/534235","https://go.dev/issue/63417","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV/","https://pkg.go.dev/vuln/GO-2023-2102","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20231110-0008/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39325","description":"A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function."},{"id":"GHSA-4374-p667-p6c8","cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39325","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-39325","date":"2026-10-08","epss":0.03796,"percentile":0.89716}],"urls":["https://github.com/golang/go/issues/63417","https://go.dev/cl/534215","https://go.dev/cl/534235","https://go.dev/issue/63417","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://nvd.nist.gov/vuln/detail/CVE-2023-39325","https://pkg.go.dev/vuln/GO-2023-2102","https://security.gentoo.org/glsa/202311-09","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OVW5V2DM5K5IC3H7O42YDUGNJ74J35O","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SZN67IL7HMGMNAVLOTIXLIHUDXZK4LH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RSKA2II6QTD4YUKUNDVJQSRYSFC4VFR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVZDNSMVDAQJ64LJC5I5U5LDM5753647","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2BBIDR2ZMB3X5BC7SR4SLQMHRMVPY6L","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECRC75BQJP6FJN2L7KCKYZW4DSBD7QSD","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FTMJ3NJIDAZFWJQQSP3L22MUFJ3UP2PT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSY7SXFFTPZFWDM6XELSDSHZLVW3AHK7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZQIELEIRSZUYTFFH5KTH2YJ4IIQG2KE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPWCNYB5PQ5PCVZ4NJT6G56ZYFZ5QBU6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MZQYOOKHQDQ57LV2IAG6NRFOVXKHJJ3Z","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NG7IMPL55MVWU3LCI4JQJT3K2U5CHDV7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OXGWPQOJ3JNDW2XIYKIVJ7N7QUIFNM2Q","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PJCUNGIQDUMZ4Z6HWVYIMR66A35F5S74","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QF5QSYAOPDOWLY6DUHID56Q4HQFYB45I","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3UETKPUB3V5JS5TLZOF3SMTGT5K5APS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ULQQONMSCQSH5Z5OWFFQHCGEZ3NL4DRJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTT7DG3QOF5ZNJLUGHDNLRUIN6OWZARP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W2LZSWTV4NV4SNQARNXG5T6LRHP26EW2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WCNCBYKZXLDFGAJUB7ZP5VLC3YTHJNVH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XTNLSL44Y5FB6JWADSZH6DCV4JJAAEQY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YRKEXKANQ7BKJW2YTAMP625LJUJZLJ4P","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZSVEMQV5ROY5YW5QE3I57HT3ITWG5GCV","https://security.netapp.com/advisory/ntap-20231110-0008","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5E5JSJBZLYXOTZWXHJKRVCIXIHVWKJ6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJWHBLVZDM5KQSDFRBFRKU5KSSOLIRQ4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ODBY7RVMGZCBSTWF2OZGIZS57FNFUL67","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QXOU2JZUBEBP7GBKAYIJRPRBZSJCD7ST","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WJ4QVX2AMUJ2F2S27POOAHRC4K3CHU4"],"severity":"High","namespace":"github:language:go","dataSource":"https://github.com/advisories/GHSA-4374-p667-p6c8","description":"HTTP/2 rapid reset can cause excessive work in net/http"}]},{"artifact":{"id":"17fb54fc24206b77","cpes":["cpe:2.3:a:org.eclipse.jetty.http2:http2-hpack:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.http2:http2_hpack:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.http2:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-hpack:http2-hpack:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-hpack:http2_hpack:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_hpack:http2-hpack:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_hpack:http2_hpack:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2-hpack:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2_hpack:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-hpack:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2-hpack:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2_hpack:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_hpack:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2-hpack:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2_hpack:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2:10.0.15:*:*:*:*:*:*:*"],"name":"http2-hpack","purl":"pkg:maven/org.eclipse.jetty.http2/http2-hpack@10.0.15","type":"java-archive","version":"10.0.15","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jetty.http2","virtualPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar:org.eclipse.jetty.http2:http2-hpack","manifestName":"","pomArtifactID":"http2-hpack","archiveDigests":null},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"10.0.16"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wgh7-54f2-x98r","versionConstraint":">=10.0.0,<=10.0.15 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jetty.http2:http2-hpack","version":"10.0.15"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wgh7-54f2-x98r","fix":{"state":"fixed","versions":["10.0.16"],"available":[{"date":"2023-10-11","kind":"first-observed","version":"10.0.16"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36478","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-36478","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-36478","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36478","date":"2026-10-08","epss":0.03754,"percentile":0.89599}],"risk":2.8155,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-36478","https://github.com/eclipse/jetty.project/pull/9634","https://github.com/eclipse/jetty.project/releases/tag/jetty-10.0.16","https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.16","https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.53.v20231009","https://github.com/jetty/jetty.project/security/advisories/GHSA-wgh7-54f2-x98r","http://www.openwall.com/lists/oss-security/2023/10/18/4","https://github.com/eclipse/jetty.project/security/advisories/GHSA-wgh7-54f2-x98r","https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html","https://www.debian.org/security/2023/dsa-5540","https://security.netapp.com/advisory/ntap-20231116-0011","https://security.netapp.com/advisory/ntap-20240621-0006"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wgh7-54f2-x98r","description":"HTTP/2 HPACK integer overflow and buffer allocation"},"relatedVulnerabilities":[{"id":"CVE-2023-36478","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36478","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-36478","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-36478","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36478","date":"2026-10-08","epss":0.03754,"percentile":0.89599}],"urls":["http://www.openwall.com/lists/oss-security/2023/10/18/4","https://github.com/eclipse/jetty.project/pull/9634","https://github.com/eclipse/jetty.project/releases/tag/jetty-10.0.16","https://github.com/eclipse/jetty.project/releases/tag/jetty-11.0.16","https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.53.v20231009","https://github.com/eclipse/jetty.project/security/advisories/GHSA-wgh7-54f2-x98r","https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html","https://security.netapp.com/advisory/ntap-20231116-0011/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.debian.org/security/2023/dsa-5540"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-36478","description":"Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to\nexceed their size limit. `MetaDataBuilder.java` determines if a header name or value exceeds the size limit, and throws an exception if the limit is exceeded. However, when length is very large and huffman is true, the multiplication by 4 in line 295\nwill overflow, and length will become negative. `(_size+length)` will now be negative, and the check on line 296 will not be triggered. Furthermore, `MetaDataBuilder.checkSize` allows for user-entered HPACK header value sizes to be negative, potentially leading to a very large buffer allocation later on when the user-entered size is multiplied by 2. This means that if a user provides a negative length value (or, more precisely, a length value which, when multiplied by the 4/3 fudge factor, is negative), and this length value is a very large positive number when multiplied by 2, then the user can cause a very large buffer to be allocated on the server. Users of HTTP/2 can be impacted by a remote denial of service attack. The issue has been fixed in versions 11.0.16, 10.0.16, and 9.4.53. There are no known workarounds."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1n-0+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-0464","versionConstraint":"< 1.1.1n-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-0464","fix":{"state":"fixed","versions":["1.1.1n-0+deb11u5"],"available":[{"date":"2023-05-31","kind":"advisory","version":"1.1.1n-0+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0464","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0464","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0464","date":"2026-10-08","epss":0.03658,"percentile":0.89322}],"risk":2.7435,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5417-1","link":"https://security-tracker.debian.org/tracker/DSA-5417-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-0464","description":"A security vulnerability has been identified in all supported versions  of OpenSSL related to the verification of X.509 certificate chains that include policy constraints.  Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems.  Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function."},"relatedVulnerabilities":[{"id":"CVE-2023-0464","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0464","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0464","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0464","date":"2026-10-08","epss":0.03658,"percentile":0.89322}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.couchbase.com/alerts/","https://www.debian.org/security/2023/dsa-5417","https://www.openssl.org/news/secadv/20230322.txt","https://security.netapp.com/advisory/ntap-20230406-0006/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0464","description":"A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1n-0+deb11u5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-0464","versionConstraint":"< 1.1.1n-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-0464","fix":{"state":"fixed","versions":["1.1.1n-0+deb11u5"],"available":[{"date":"2023-05-31","kind":"advisory","version":"1.1.1n-0+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0464","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0464","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0464","date":"2026-10-08","epss":0.03658,"percentile":0.89322}],"risk":2.7435,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5417-1","link":"https://security-tracker.debian.org/tracker/DSA-5417-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-0464","description":"A security vulnerability has been identified in all supported versions  of OpenSSL related to the verification of X.509 certificate chains that include policy constraints.  Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems.  Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function."},"relatedVulnerabilities":[{"id":"CVE-2023-0464","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0464","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0464","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0464","date":"2026-10-08","epss":0.03658,"percentile":0.89322}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.couchbase.com/alerts/","https://www.debian.org/security/2023/dsa-5417","https://www.openssl.org/news/secadv/20230322.txt","https://security.netapp.com/advisory/ntap-20230406-0006/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0464","description":"A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function."}]},{"artifact":{"id":"23e2e3b7c0b30450","cpes":["cpe:2.3:a:org.eclipse.jetty.http2:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.http2:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.http2:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-common:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-common:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_common:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_common:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-common:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_common:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2:10.0.15:*:*:*:*:*:*:*"],"name":"http2-common","purl":"pkg:maven/org.eclipse.jetty.http2/http2-common@10.0.15","type":"java-archive","version":"10.0.15","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jetty.http2","virtualPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar:org.eclipse.jetty.http2:http2-common","manifestName":"","pomArtifactID":"http2-common","archiveDigests":null},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"10.0.26"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mmxm-8w33-wc4h","versionConstraint":">=10.0.0,<=10.0.25 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jetty.http2:http2-common","version":"10.0.15"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-mmxm-8w33-wc4h","fix":{"state":"fixed","versions":["10.0.26"],"available":[{"date":"2025-08-21","kind":"first-observed","version":"10.0.26"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-5115","cwe":"CWE-400","type":"Secondary","source":"emo@eclipse.org"}],"epss":[{"cve":"CVE-2025-5115","date":"2026-10-08","epss":0.03626,"percentile":0.89224}],"risk":2.73763,"urls":["https://github.com/jetty/jetty.project/security/advisories/GHSA-mmxm-8w33-wc4h","https://github.com/jetty/jetty.project/pull/13449","https://github.com/jetty/jetty.project/commit/f9ee3904788b08203ed62c95a560d951da37bdb1","https://nvd.nist.gov/vuln/detail/CVE-2025-5115","https://github.com/jetty/jetty.project/releases/tag/jetty-10.0.26","https://github.com/jetty/jetty.project/releases/tag/jetty-11.0.26","https://github.com/jetty/jetty.project/releases/tag/jetty-12.0.25","https://github.com/jetty/jetty.project/releases/tag/jetty-12.1.0","https://github.com/jetty/jetty.project/releases/tag/jetty-9.4.58.v20250814","https://lists.debian.org/debian-lts-announce/2025/09/msg00014.html","https://www.kb.cert.org/vuls/id/767506","http://www.openwall.com/lists/oss-security/2025/08/20/4","http://www.openwall.com/lists/oss-security/2025/09/17/1"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mmxm-8w33-wc4h","description":"Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2025-5115","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-5115","cwe":"CWE-400","type":"Secondary","source":"emo@eclipse.org"}],"epss":[{"cve":"CVE-2025-5115","date":"2026-10-08","epss":0.03626,"percentile":0.89224}],"urls":["https://github.com/jetty/jetty.project/pull/13449","https://github.com/jetty/jetty.project/releases/tag/jetty-10.0.26","https://github.com/jetty/jetty.project/releases/tag/jetty-11.0.26","https://github.com/jetty/jetty.project/releases/tag/jetty-12.0.25","https://github.com/jetty/jetty.project/releases/tag/jetty-12.1.0","https://github.com/jetty/jetty.project/releases/tag/jetty-9.4.58.v20250814","https://github.com/jetty/jetty.project/security/advisories/GHSA-mmxm-8w33-wc4h","http://www.openwall.com/lists/oss-security/2025/08/20/4","http://www.openwall.com/lists/oss-security/2025/09/17/1","https://lists.debian.org/debian-lts-announce/2025/09/msg00014.html","https://www.kb.cert.org/vuls/id/767506"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-5115","description":"In Eclipse Jetty, versions <=9.4.57, <=10.0.25, <=11.0.25, <=12.0.21, <=12.1.0.alpha2, an HTTP/2 client may trigger the server to send RST_STREAM frames, for example by sending frames that are malformed or that should not be sent in a particular stream state, therefore forcing the server to consume resources such as CPU and memory.\n\n\nFor example, a client can open a stream and then send WINDOW_UPDATE frames with window size increment of 0, which is illegal.\nPer specification  https://www.rfc-editor.org/rfc/rfc9113.html#name-window_update , the server should send a RST_STREAM frame.\nThe client can now open another stream and send another bad WINDOW_UPDATE, therefore causing the server to consume more resources than necessary, as this case does not exceed the max number of concurrent streams, yet the client is able to create an enormous amount of streams in a short period of time.\n\n\nThe attack can be performed with other conditions (for example, a DATA frame for a closed stream) that cause the server to send a RST_STREAM frame.\n\n\n\nLinks:\n\n\n\n  *   https://github.com/jetty/jetty.project/security/advisories/GHSA-mmxm-8w33-wc4h"}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-9143","versionConstraint":"< 1.1.1w-0+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-9143","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-08","epss":0.05842,"percentile":0.92986}],"risk":2.7165299999999997,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-9143","description":"Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes.  Impact summary: Out of bound memory writes can lead to an application crash or even a possibility of a remote code execution, however, in all the protocols involving Elliptic Curve Cryptography that we're aware of, either only \"named curves\" are supported, or, if explicit curve parameters are supported, they specify an X9.62 encoding of binary (GF(2^m)) curves that can't represent problematic input values. Thus the likelihood of existence of a vulnerable application is low.  In particular, the X9.62 encoding is used for ECC keys in X.509 certificates, so problematic inputs cannot occur in the context of processing X.509 certificates.  Any problematic use-cases would have to be using an \"exotic\" curve encoding.  The affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(), and various supporting BN_GF2m_*() functions.  Applications working with \"exotic\" explicit binary (GF(2^m)) curve parameters, that make it possible to represent invalid field polynomials with a zero constant term, via the above or similar APIs, may terminate abruptly as a result of reading or writing outside of array bounds.  Remote code execution cannot easily be ruled out.  The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2024-9143","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-08","epss":0.05842,"percentile":0.92986}],"urls":["https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712","https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700","https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4","https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154","https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a","https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41","https://openssl-library.org/news/secadv/20241016.txt","http://www.openwall.com/lists/oss-security/2024/10/16/1","http://www.openwall.com/lists/oss-security/2024/10/23/1","http://www.openwall.com/lists/oss-security/2024/10/24/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20241101-0001/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9143","description":"Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-9143","versionConstraint":"< 1.1.1w-0+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-9143","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-08","epss":0.05842,"percentile":0.92986}],"risk":2.7165299999999997,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-9143","description":"Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes.  Impact summary: Out of bound memory writes can lead to an application crash or even a possibility of a remote code execution, however, in all the protocols involving Elliptic Curve Cryptography that we're aware of, either only \"named curves\" are supported, or, if explicit curve parameters are supported, they specify an X9.62 encoding of binary (GF(2^m)) curves that can't represent problematic input values. Thus the likelihood of existence of a vulnerable application is low.  In particular, the X9.62 encoding is used for ECC keys in X.509 certificates, so problematic inputs cannot occur in the context of processing X.509 certificates.  Any problematic use-cases would have to be using an \"exotic\" curve encoding.  The affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(), and various supporting BN_GF2m_*() functions.  Applications working with \"exotic\" explicit binary (GF(2^m)) curve parameters, that make it possible to represent invalid field polynomials with a zero constant term, via the above or similar APIs, may terminate abruptly as a result of reading or writing outside of array bounds.  Remote code execution cannot easily be ruled out.  The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2024-9143","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-08","epss":0.05842,"percentile":0.92986}],"urls":["https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712","https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700","https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4","https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154","https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a","https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41","https://openssl-library.org/news/secadv/20241016.txt","http://www.openwall.com/lists/oss-security/2024/10/16/1","http://www.openwall.com/lists/oss-security/2024/10/23/1","http://www.openwall.com/lists/oss-security/2024/10/24/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20241101-0001/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9143","description":"Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.28"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-30761","versionConstraint":"< 1.8.0_462||>= 1.9, < 8.0.462||>= 9, < 11.0.28 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-30761","fix":{"state":"fixed","versions":["1.8.0_462","8.0.462","11.0.28"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_462"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.462"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.28"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-30761","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-30761","date":"2026-10-08","epss":0.04873,"percentile":0.91827}],"risk":2.6557850000000003,"urls":["https://www.oracle.com/security-alerts/cpujul2025.html","http://www.openwall.com/lists/oss-security/2025/07/16/1","http://www.openwall.com/lists/oss-security/2025/07/21/3","http://www.openwall.com/lists/oss-security/2025/07/24/1","https://lists.debian.org/debian-lts-announce/2025/07/msg00011.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-30761","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf and  11.0.27; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"5aa5fc0ebbc6f0c0","cpes":["cpe:2.3:a:org.jenkins-ci.main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:org.jenkins-ci.main:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins_core:2.407:*:*:*:*:*:*:*"],"name":"jenkins-core","purl":"pkg:maven/org.jenkins-ci.main/jenkins-core@2.407","type":"java-archive","version":"2.407","language":"java","licenses":["The MIT license"],"metadata":{"pomGroupID":"org.jenkins-ci.main","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","manifestName":"","pomArtifactID":"jenkins-core","archiveDigests":[{"value":"e7fc0a769dfabd6c316cde23c6bd1dd8a7c4d94b","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.516.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-67v4-38h7-9jjp","versionConstraint":"<2.516.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.main:jenkins-core","version":"2.407"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-67v4-38h7-9jjp","fix":{"state":"fixed","versions":["2.516.3"],"available":[{"date":"2025-09-18","kind":"first-observed","version":"2.516.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-59474","cwe":"CWE-862","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-59474","date":"2026-10-08","epss":0.04908,"percentile":0.91884}],"risk":2.5276199999999998,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-59474","https://www.jenkins.io/security/advisory/2025-09-17/#SECURITY-3594","http://www.openwall.com/lists/oss-security/2025/09/17/1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-67v4-38h7-9jjp","description":"Jenkins has a missing permission check, allowing users to obtain agent names"},"relatedVulnerabilities":[{"id":"CVE-2025-59474","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-59474","cwe":"CWE-862","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-59474","date":"2026-10-08","epss":0.04908,"percentile":0.91884}],"urls":["https://www.jenkins.io/security/advisory/2025-09-17/#SECURITY-3594","http://www.openwall.com/lists/oss-security/2025/09/17/1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-59474","description":"Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible to users lacking Overall/Read permission, allowing attackers without Overall/Read permission to list agent names through its sidepanel executors widget."}]},{"artifact":{"id":"c103c066c49ae324","cpes":["cpe:2.3:a:golang:networking:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2","type":"go-module","version":"v0.0.0-20211112202133-69e39bad7dc2","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.0.0-20220906165146-f3363e06e74c"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-69cg-p879-7622","versionConstraint":"<0.0.0-20220906165146-f3363e06e74c (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.0.0-20211112202133-69e39bad7dc2"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-69cg-p879-7622","fix":{"state":"fixed","versions":["0.0.0-20220906165146-f3363e06e74c"],"available":[{"date":"2023-02-20","kind":"first-observed","version":"0.0.0-20220906165146-f3363e06e74c"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2022-27664","date":"2026-10-08","epss":0.03269,"percentile":0.88055}],"risk":2.4517499999999997,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-27664","https://groups.google.com/g/golang-announce","https://groups.google.com/g/golang-announce/c/x49AQzIVX-s","https://security.gentoo.org/glsa/202209-26","https://pkg.go.dev/vuln/GO-2022-0969","https://go.dev/cl/428735","https://go.dev/issue/54658","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JXKTHIGE5F576MAPFYCIJXNRGBSPISUF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TXS2OQ57KZC5XZKK5UW4SYKPVQAHIOJX","https://security.netapp.com/advisory/ntap-20220923-0004"],"severity":"High","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-69cg-p879-7622","description":"golang.org/x/net/http2 Denial of Service vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2022-27664","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2022-27664","date":"2026-10-08","epss":0.03269,"percentile":0.88055}],"urls":["https://groups.google.com/g/golang-announce","https://groups.google.com/g/golang-announce/c/x49AQzIVX-s","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXKTHIGE5F576MAPFYCIJXNRGBSPISUF/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXS2OQ57KZC5XZKK5UW4SYKPVQAHIOJX/","https://security.gentoo.org/glsa/202209-26","https://security.netapp.com/advisory/ntap-20220923-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27664","description":"In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5678","versionConstraint":"< 1.1.1w-0+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-5678","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-08","epss":0.04459,"percentile":0.9119}],"risk":2.296385,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-5678","description":"Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow.  Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays.  Likewise, applications that use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42 DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.  While DH_check() performs all the necessary checks (as of CVE-2023-3817), DH_check_pub_key() doesn't make any of these checks, and is therefore vulnerable for excessively large P and Q parameters.  Likewise, while DH_generate_key() performs a check for an excessively large P, it doesn't check for an excessively large Q.  An application that calls DH_generate_key() or DH_check_pub_key() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack.  DH_generate_key() and DH_check_pub_key() are also called by a number of other OpenSSL functions.  An application calling any of those other functions may similarly be affected.  The other functions affected by this are DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().  Also vulnerable are the OpenSSL pkey command line application when using the \"-pubcheck\" option, as well as the OpenSSL genpkey command line application.  The OpenSSL SSL/TLS implementation is not affected by this issue.  The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2023-5678","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-08","epss":0.04459,"percentile":0.9119}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6","https://www.openssl.org/news/secadv/20231106.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20231130-0010/","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-128433.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-556635.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5678","description":"Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-5678","versionConstraint":"< 1.1.1w-0+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-5678","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-08","epss":0.04459,"percentile":0.9119}],"risk":2.296385,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-5678","description":"Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow.  Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays.  Likewise, applications that use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42 DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.  While DH_check() performs all the necessary checks (as of CVE-2023-3817), DH_check_pub_key() doesn't make any of these checks, and is therefore vulnerable for excessively large P and Q parameters.  Likewise, while DH_generate_key() performs a check for an excessively large P, it doesn't check for an excessively large Q.  An application that calls DH_generate_key() or DH_check_pub_key() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack.  DH_generate_key() and DH_check_pub_key() are also called by a number of other OpenSSL functions.  An application calling any of those other functions may similarly be affected.  The other functions affected by this are DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().  Also vulnerable are the OpenSSL pkey command line application when using the \"-pubcheck\" option, as well as the OpenSSL genpkey command line application.  The OpenSSL SSL/TLS implementation is not affected by this issue.  The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2023-5678","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-08","epss":0.04459,"percentile":0.9119}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6","https://www.openssl.org/news/secadv/20231106.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20231130-0010/","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-128433.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-556635.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5678","description":"Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-4741","versionConstraint":"< 1.1.1w-0+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-4741","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-08","epss":0.02925,"percentile":0.86654}],"risk":2.19375,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-4741","description":"Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations  Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary code. However, only applications that directly call the SSL_free_buffers function are affected by this issue. Applications that do not call this function are not vulnerable. Our investigations indicate that this function is rarely used by applications.  The SSL_free_buffers function is used to free the internal OpenSSL buffer used when processing an incoming record from the network. The call is only expected to succeed if the buffer is not currently in use. However, two scenarios have been identified where the buffer is freed even when still in use.  The first scenario occurs where a record header has been received from the network and processed by OpenSSL, but the full record body has not yet arrived. In this case calling SSL_free_buffers will succeed even though a record has only been partially processed and the buffer is still in use.  The second scenario occurs where a full record containing application data has been received and processed by OpenSSL but the application has only read part of this data. Again a call to SSL_free_buffers will succeed even though the buffer is still in use.  While these scenarios could occur accidentally during normal operation a malicious attacker could attempt to engineer a stituation where this occurs. We are not aware of this issue being actively exploited.  The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2024-4741","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-08","epss":0.02925,"percentile":0.86654}],"urls":["https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177","https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d","https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac","https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8","https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4","https://www.openssl.org/news/secadv/20240528.txt","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240621-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4741","description":"Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-4741","versionConstraint":"< 1.1.1w-0+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-4741","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-08","epss":0.02925,"percentile":0.86654}],"risk":2.19375,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-4741","description":"Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations  Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary code. However, only applications that directly call the SSL_free_buffers function are affected by this issue. Applications that do not call this function are not vulnerable. Our investigations indicate that this function is rarely used by applications.  The SSL_free_buffers function is used to free the internal OpenSSL buffer used when processing an incoming record from the network. The call is only expected to succeed if the buffer is not currently in use. However, two scenarios have been identified where the buffer is freed even when still in use.  The first scenario occurs where a record header has been received from the network and processed by OpenSSL, but the full record body has not yet arrived. In this case calling SSL_free_buffers will succeed even though a record has only been partially processed and the buffer is still in use.  The second scenario occurs where a full record containing application data has been received and processed by OpenSSL but the application has only read part of this data. Again a call to SSL_free_buffers will succeed even though the buffer is still in use.  While these scenarios could occur accidentally during normal operation a malicious attacker could attempt to engineer a stituation where this occurs. We are not aware of this issue being actively exploited.  The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2024-4741","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-08","epss":0.02925,"percentile":0.86654}],"urls":["https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177","https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d","https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac","https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8","https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4","https://www.openssl.org/news/secadv/20240528.txt","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240621-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4741","description":"Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1703","versionConstraint":"<1.19.8||>=1.20.0-0,<1.20.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1703","fix":{"state":"fixed","versions":["1.19.8","1.20.3"],"available":[{"date":"2023-04-04","kind":"release","version":"1.19.8"},{"date":"2023-04-04","kind":"release","version":"1.20.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24538","cwe":"CWE-94","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24538","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24538","date":"2026-10-08","epss":0.02281,"percentile":0.82616}],"risk":2.14414,"urls":["https://go.dev/cl/482079","https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/59234","description":"Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected.\n\nBackticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to terminate the literal, injecting arbitrary Javascript code into the Go template.\n\nAs ES6 template literals are rather complex, and themselves can do string interpolation, the decision was made to simply disallow Go template actions from being used inside of them (e.g. \"var a = {{.}}\"), since there is no obviously safe way to allow this behavior. This takes the same approach as github.com/google/safehtml.\n\nWith fix, Template.Parse returns an Error when it encounters templates like this, with an ErrorCode of value 12. This ErrorCode is currently unexported, but will be exported in the release of Go 1.21.\n\nUsers who rely on the previous behavior can re-enable it using the GODEBUG flag jstmpllitinterp=1, with the caveat that backticks will now be escaped. This should be used with caution."},"relatedVulnerabilities":[{"id":"CVE-2023-24538","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24538","cwe":"CWE-94","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24538","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24538","date":"2026-10-08","epss":0.02281,"percentile":0.82616}],"urls":["https://go.dev/cl/482079","https://go.dev/issue/59234","https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8","https://pkg.go.dev/vuln/GO-2023-1703","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20241115-0007/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-24538","description":"Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to terminate the literal, injecting arbitrary Javascript code into the Go template. As ES6 template literals are rather complex, and themselves can do string interpolation, the decision was made to simply disallow Go template actions from being used inside of them (e.g. \"var a = {{.}}\"), since there is no obviously safe way to allow this behavior. This takes the same approach as github.com/google/safehtml. With fix, Template.Parse returns an Error when it encounters templates like this, with an ErrorCode of value 12. This ErrorCode is currently unexported, but will be exported in the release of Go 1.21. Users who rely on the previous behavior can re-enable it using the GODEBUG flag jstmpllitinterp=1, with the caveat that backticks will now be escaped. This should be used with caution."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.20.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-2185","versionConstraint":"<1.20.11||>=1.21.0-0,<1.21.4 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-2185","fix":{"state":"fixed","versions":["1.20.11","1.21.4"],"available":[{"date":"2023-11-07","kind":"release","version":"1.20.11"},{"date":"2023-11-07","kind":"release","version":"1.21.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45283","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-45283","date":"2026-10-08","epss":0.02758,"percentile":0.85831}],"risk":2.0685000000000002,"urls":["https://go.dev/cl/540277","https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY","https://go.dev/issue/64028","https://go.dev/cl/541175","https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/63713","description":"The filepath package does not recognize paths with a \\??\\ prefix as special.\n\nOn Windows, a path beginning with \\??\\ is a Root Local Device path equivalent to a path beginning with \\\\?\\. Paths with a \\??\\ prefix may be used to access arbitrary locations on the system. For example, the path \\??\\c:\\x is equivalent to the more common path c:\\x.\n\nBefore fix, Clean could convert a rooted path such as \\a\\..\\??\\b into the root local device path \\??\\b. Clean will now convert this to .\\??\\b.\n\nSimilarly, Join(\\, ??, b) could convert a seemingly innocent sequence of path elements into the root local device path \\??\\b. Join will now convert this to \\.\\??\\b.\n\nIn addition, with fix, IsAbs now correctly reports paths beginning with \\??\\ as absolute, and VolumeName correctly reports the \\??\\ prefix as a volume name.\n\nUPDATE: Go 1.20.11 and Go 1.21.4 inadvertently changed the definition of the volume name in Windows paths starting with \\?, resulting in filepath.Clean(\\?\\c:) returning \\?\\c: rather than \\?\\c:\\ (among other effects). The previous behavior has been restored."},"relatedVulnerabilities":[{"id":"CVE-2023-45283","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45283","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-45283","date":"2026-10-08","epss":0.02758,"percentile":0.85831}],"urls":["http://www.openwall.com/lists/oss-security/2023/12/05/2","https://go.dev/cl/540277","https://go.dev/cl/541175","https://go.dev/issue/63713","https://go.dev/issue/64028","https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY","https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ","https://pkg.go.dev/vuln/GO-2023-2185","https://security.netapp.com/advisory/ntap-20231214-0008/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-45283","description":"The filepath package does not recognize paths with a \\??\\ prefix as special. On Windows, a path beginning with \\??\\ is a Root Local Device path equivalent to a path beginning with \\\\?\\. Paths with a \\??\\ prefix may be used to access arbitrary locations on the system. For example, the path \\??\\c:\\x is equivalent to the more common path c:\\x. Before fix, Clean could convert a rooted path such as \\a\\..\\??\\b into the root local device path \\??\\b. Clean will now convert this to .\\??\\b. Similarly, Join(\\, ??, b) could convert a seemingly innocent sequence of path elements into the root local device path \\??\\b. Join will now convert this to \\.\\??\\b. In addition, with fix, IsAbs now correctly reports paths beginning with \\??\\ as absolute, and VolumeName correctly reports the \\??\\ prefix as a volume name. UPDATE: Go 1.20.11 and Go 1.21.4 inadvertently changed the definition of the volume name in Windows paths starting with \\?, resulting in filepath.Clean(\\?\\c:) returning \\?\\c: rather than \\?\\c:\\ (among other effects). The previous behavior has been restored."}]},{"artifact":{"id":"21eba376b06d560f","cpes":["cpe:2.3:a:org.springframework:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_web:5.3.27:*:*:*:*:*:*:*"],"name":"spring-web","purl":"pkg:maven/org.springframework/spring-web@5.3.27","type":"java-archive","version":"5.3.27","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-web-5.3.27.jar","manifestName":"","pomArtifactID":"spring-web","archiveDigests":[{"value":"a51c45a8602052a2a90f7e645a47ba8df1547795","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-web-5.3.27.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.3.33"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hgjh-9rj2-g67j","versionConstraint":"<5.3.33 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-web","version":"5.3.27"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-hgjh-9rj2-g67j","fix":{"state":"fixed","versions":["5.3.33"],"available":[{"date":"2024-03-19","kind":"first-observed","version":"5.3.33"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22259","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22259","date":"2026-10-08","epss":0.02573,"percentile":0.84713}],"risk":2.00694,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-22259","https://spring.io/security/cve-2024-22259","https://github.com/spring-projects/spring-framework/commit/297cbae2990e1413537c55845a7e0ea0ffd9f9bb","https://github.com/spring-projects/spring-framework/commit/381f790329a48b74c2a49fc1384dd68ca9153501","https://github.com/spring-projects/spring-framework/commit/f2fd2f12269c6a781c5b2c20b3c24141055a3d68","https://security.netapp.com/advisory/ntap-20240524-0002"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hgjh-9rj2-g67j","description":"Spring Framework URL Parsing with Host Validation Vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-22259","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22259","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22259","date":"2026-10-08","epss":0.02573,"percentile":0.84713}],"urls":["https://security.netapp.com/advisory/ntap-20240524-0002/","https://spring.io/security/cve-2024-22259"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22259","description":"Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u10"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-38546","versionConstraint":"< 7.74.0-1.3+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-38546","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u10"],"available":[{"date":"2023-10-11","kind":"advisory","version":"7.74.0-1.3+deb11u10"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-38546","date":"2026-10-08","epss":0.05956,"percentile":0.931}],"risk":1.9952599999999998,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5523-1","link":"https://security-tracker.debian.org/tracker/DSA-5523-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-38546","description":"This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met.  libcurl performs transfers. In its API, an application creates \"easy handles\" that are the individual handles for single transfers.  libcurl provides a function call that duplicates en easy handle called [curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html).  If a transfer has cookies enabled when the handle is duplicated, the cookie-enable state is also cloned - but without cloning the actual cookies. If the source handle did not read any cookies from a specific file on disk, the cloned version of the handle would instead store the file name as `none` (using the four ASCII letters, no quotes).  Subsequent use of the cloned handle that does not explicitly set a source to load cookies from would then inadvertently load cookies from a file named `none` - if such a file exists and is readable in the current directory of the program using libcurl. And if using the correct file format of course."},"relatedVulnerabilities":[{"id":"CVE-2023-38546","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-38546","date":"2026-10-08","epss":0.05956,"percentile":0.931}],"urls":["http://seclists.org/fulldisclosure/2024/Jan/34","http://seclists.org/fulldisclosure/2024/Jan/37","http://seclists.org/fulldisclosure/2024/Jan/38","https://curl.se/docs/CVE-2023-38546.html","https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/","https://support.apple.com/kb/HT214036","https://support.apple.com/kb/HT214057","https://support.apple.com/kb/HT214058","https://support.apple.com/kb/HT214063","https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-943925.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-38546","description":"This flaw allows an attacker to insert cookies at will into a running program\nusing libcurl, if the specific series of conditions are met.\n\nlibcurl performs transfers. In its API, an application creates \"easy handles\"\nthat are the individual handles for single transfers.\n\nlibcurl provides a function call that duplicates en easy handle called\n[curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html).\n\nIf a transfer has cookies enabled when the handle is duplicated, the\ncookie-enable state is also cloned - but without cloning the actual\ncookies. If the source handle did not read any cookies from a specific file on\ndisk, the cloned version of the handle would instead store the file name as\n`none` (using the four ASCII letters, no quotes).\n\nSubsequent use of the cloned handle that does not explicitly set a source to\nload cookies from would then inadvertently load cookies from a file named\n`none` - if such a file exists and is readable in the current directory of the\nprogram using libcurl. And if using the correct file format of course."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-38546","versionConstraint":"< 7.74.0-1.3+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-38546","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u10"],"available":[{"date":"2023-10-11","kind":"advisory","version":"7.74.0-1.3+deb11u10"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-38546","date":"2026-10-08","epss":0.05956,"percentile":0.931}],"risk":1.9952599999999998,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5523-1","link":"https://security-tracker.debian.org/tracker/DSA-5523-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-38546","description":"This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met.  libcurl performs transfers. In its API, an application creates \"easy handles\" that are the individual handles for single transfers.  libcurl provides a function call that duplicates en easy handle called [curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html).  If a transfer has cookies enabled when the handle is duplicated, the cookie-enable state is also cloned - but without cloning the actual cookies. If the source handle did not read any cookies from a specific file on disk, the cloned version of the handle would instead store the file name as `none` (using the four ASCII letters, no quotes).  Subsequent use of the cloned handle that does not explicitly set a source to load cookies from would then inadvertently load cookies from a file named `none` - if such a file exists and is readable in the current directory of the program using libcurl. And if using the correct file format of course."},"relatedVulnerabilities":[{"id":"CVE-2023-38546","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-38546","date":"2026-10-08","epss":0.05956,"percentile":0.931}],"urls":["http://seclists.org/fulldisclosure/2024/Jan/34","http://seclists.org/fulldisclosure/2024/Jan/37","http://seclists.org/fulldisclosure/2024/Jan/38","https://curl.se/docs/CVE-2023-38546.html","https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/","https://support.apple.com/kb/HT214036","https://support.apple.com/kb/HT214057","https://support.apple.com/kb/HT214058","https://support.apple.com/kb/HT214063","https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-943925.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-38546","description":"This flaw allows an attacker to insert cookies at will into a running program\nusing libcurl, if the specific series of conditions are met.\n\nlibcurl performs transfers. In its API, an application creates \"easy handles\"\nthat are the individual handles for single transfers.\n\nlibcurl provides a function call that duplicates en easy handle called\n[curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html).\n\nIf a transfer has cookies enabled when the handle is duplicated, the\ncookie-enable state is also cloned - but without cloning the actual\ncookies. If the source handle did not read any cookies from a specific file on\ndisk, the cloned version of the handle would instead store the file name as\n`none` (using the four ASCII letters, no quotes).\n\nSubsequent use of the cloned handle that does not explicitly set a source to\nload cookies from would then inadvertently load cookies from a file named\n`none` - if such a file exists and is readable in the current directory of the\nprogram using libcurl. And if using the correct file format of course."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-38546","versionConstraint":"< 7.74.0-1.3+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-38546","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u10"],"available":[{"date":"2023-10-11","kind":"advisory","version":"7.74.0-1.3+deb11u10"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-38546","date":"2026-10-08","epss":0.05956,"percentile":0.931}],"risk":1.9952599999999998,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5523-1","link":"https://security-tracker.debian.org/tracker/DSA-5523-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-38546","description":"This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met.  libcurl performs transfers. In its API, an application creates \"easy handles\" that are the individual handles for single transfers.  libcurl provides a function call that duplicates en easy handle called [curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html).  If a transfer has cookies enabled when the handle is duplicated, the cookie-enable state is also cloned - but without cloning the actual cookies. If the source handle did not read any cookies from a specific file on disk, the cloned version of the handle would instead store the file name as `none` (using the four ASCII letters, no quotes).  Subsequent use of the cloned handle that does not explicitly set a source to load cookies from would then inadvertently load cookies from a file named `none` - if such a file exists and is readable in the current directory of the program using libcurl. And if using the correct file format of course."},"relatedVulnerabilities":[{"id":"CVE-2023-38546","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-38546","date":"2026-10-08","epss":0.05956,"percentile":0.931}],"urls":["http://seclists.org/fulldisclosure/2024/Jan/34","http://seclists.org/fulldisclosure/2024/Jan/37","http://seclists.org/fulldisclosure/2024/Jan/38","https://curl.se/docs/CVE-2023-38546.html","https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/","https://support.apple.com/kb/HT214036","https://support.apple.com/kb/HT214057","https://support.apple.com/kb/HT214058","https://support.apple.com/kb/HT214063","https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-943925.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-38546","description":"This flaw allows an attacker to insert cookies at will into a running program\nusing libcurl, if the specific series of conditions are met.\n\nlibcurl performs transfers. In its API, an application creates \"easy handles\"\nthat are the individual handles for single transfers.\n\nlibcurl provides a function call that duplicates en easy handle called\n[curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html).\n\nIf a transfer has cookies enabled when the handle is duplicated, the\ncookie-enable state is also cloned - but without cloning the actual\ncookies. If the source handle did not read any cookies from a specific file on\ndisk, the cloned version of the handle would instead store the file name as\n`none` (using the four ASCII letters, no quotes).\n\nSubsequent use of the cloned handle that does not explicitly set a source to\nload cookies from would then inadvertently load cookies from a file named\n`none` - if such a file exists and is readable in the current directory of the\nprogram using libcurl. And if using the correct file format of course."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.5"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-41105","versionConstraint":">= 3.11.0, < 3.11.5||>= 3.12.0a1, < 3.12.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.5"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-41105","versionConstraint":">= 3.11.0, < 3.11.5||>= 3.12.0a1, < 3.12.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-41105","fix":{"state":"fixed","versions":["3.11.5","3.12.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.11.5"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.5"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.0rc2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-41105","cwe":"CWE-426","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-41105","date":"2026-10-08","epss":0.02587,"percentile":0.84798}],"risk":1.94025,"urls":["https://github.com/python/cpython/issues/106242","https://github.com/python/cpython/pull/107981","https://github.com/python/cpython/pull/107982","https://github.com/python/cpython/pull/107983","https://mail.python.org/archives/list/security-announce%40python.org/thread/D6CDW3ZZC5D444YGL3VQUY6D4ECMCQLD/","https://security.netapp.com/advisory/ntap-20231006-0015/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-41105","description":"An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\\0' byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x."},"relatedVulnerabilities":[]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28388","versionConstraint":"< 1.1.1w-0+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-28388","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u7"],"available":[{"date":"2026-06-10","kind":"first-observed","version":"1.1.1w-0+deb11u7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-08","epss":0.02501,"percentile":0.84231}],"risk":1.87575,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-28388","description":"Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing.  Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application.  When CRL processing and delta CRL processing is enabled during X.509 certificate verification, the delta CRL processing does not check whether the CRL Number extension is NULL before dereferencing it. When a malformed delta CRL file is being processed, this parameter can be NULL, causing a NULL pointer dereference.  Exploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in the verification context, the certificate being verified to contain a freshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and an attacker to provide a malformed CRL to an application that processes it.  The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. For that reason the issue was assessed as Low severity according to our Security Policy.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-28388","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-08","epss":0.02501,"percentile":0.84231}],"urls":["https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e","https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139","https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3","https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8","https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28388","description":"Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28388","versionConstraint":"< 1.1.1w-0+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-28388","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u7"],"available":[{"date":"2026-06-10","kind":"first-observed","version":"1.1.1w-0+deb11u7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-08","epss":0.02501,"percentile":0.84231}],"risk":1.87575,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-28388","description":"Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing.  Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application.  When CRL processing and delta CRL processing is enabled during X.509 certificate verification, the delta CRL processing does not check whether the CRL Number extension is NULL before dereferencing it. When a malformed delta CRL file is being processed, this parameter can be NULL, causing a NULL pointer dereference.  Exploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in the verification context, the certificate being verified to contain a freshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and an attacker to provide a malformed CRL to an application that processes it.  The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. For that reason the issue was assessed as Low severity according to our Security Policy.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-28388","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-08","epss":0.02501,"percentile":0.84231}],"urls":["https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e","https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139","https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3","https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8","https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28388","description":"Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"c3466eb679e28aa6","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A8.4p1-5%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=openssh","type":"deb","version":"1:8.4p1-5+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Beer-ware","Expat-with-advertising-restriction","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-client/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:8.4p1-5+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-41617","versionConstraint":"< 1:8.4p1-5+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssh","version":"1:8.4p1-5+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2021-41617","fix":{"state":"fixed","versions":["1:8.4p1-5+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:8.4p1-5+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-41617","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-41617","date":"2026-10-08","epss":0.02545,"percentile":0.84536}],"risk":1.845125,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2021-41617","description":"sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user."},"relatedVulnerabilities":[{"id":"CVE-2021-41617","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":4.4,"impactScore":6.5,"exploitabilityScore":3.4},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-41617","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-41617","date":"2026-10-08","epss":0.02545,"percentile":0.84536}],"urls":["https://bugzilla.suse.com/show_bug.cgi?id=1190975","https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/","https://security.netapp.com/advisory/ntap-20211014-0004/","https://www.debian.org/security/2023/dsa-5586","https://www.openssh.com/security.html","https://www.openssh.com/txt/release-8.8","https://www.openwall.com/lists/oss-security/2021/09/26/1","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.starwindsoftware.com/security/sw-20220805-0001/","https://www.tenable.com/plugins/nessus/154174","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-41617","description":"sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.21.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2024-2887","versionConstraint":"<1.21.11||>=1.22.0-0,<1.22.4 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2024-2887","fix":{"state":"fixed","versions":["1.21.11","1.22.4"],"available":[{"date":"2024-06-04","kind":"release","version":"1.21.11"},{"date":"2024-06-04","kind":"release","version":"1.22.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-24790","date":"2026-10-08","epss":0.01952,"percentile":0.79639}],"risk":1.8348800000000003,"urls":["https://go.dev/issue/67680","https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/590316","description":"The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms."},"relatedVulnerabilities":[{"id":"CVE-2024-24790","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-24790","date":"2026-10-08","epss":0.01952,"percentile":0.79639}],"urls":["http://www.openwall.com/lists/oss-security/2024/06/04/1","https://go.dev/cl/590316","https://go.dev/issue/67680","https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ","https://pkg.go.dev/vuln/GO-2024-2887","https://security.netapp.com/advisory/ntap-20240905-0002/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-24790","description":"The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms."}]},{"artifact":{"id":"5aa5fc0ebbc6f0c0","cpes":["cpe:2.3:a:org.jenkins-ci.main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:org.jenkins-ci.main:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins_core:2.407:*:*:*:*:*:*:*"],"name":"jenkins-core","purl":"pkg:maven/org.jenkins-ci.main/jenkins-core@2.407","type":"java-archive","version":"2.407","language":"java","licenses":["The MIT license"],"metadata":{"pomGroupID":"org.jenkins-ci.main","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","manifestName":"","pomArtifactID":"jenkins-core","archiveDigests":[{"value":"e7fc0a769dfabd6c316cde23c6bd1dd8a7c4d94b","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.414.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-279f-qwgh-h5mp","versionConstraint":">=2.50,<2.414.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.main:jenkins-core","version":"2.407"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-279f-qwgh-h5mp","fix":{"state":"fixed","versions":["2.414.2"],"available":[{"date":"2023-09-22","kind":"first-observed","version":"2.414.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-43494","date":"2026-10-08","epss":0.03937,"percentile":0.90111}],"risk":1.8307049999999998,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-43494","https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3261","http://www.openwall.com/lists/oss-security/2023/09/20/5","https://github.com/jenkinsci/jenkins/commit/b8ac8cd4c51511b9f844846ba80a8aed054288c5"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-279f-qwgh-h5mp","description":"Jenkins does not exclude sensitive build variables from search"},"relatedVulnerabilities":[{"id":"CVE-2023-43494","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-43494","date":"2026-10-08","epss":0.03937,"percentile":0.90111}],"urls":["http://www.openwall.com/lists/oss-security/2023/09/20/5","https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3261"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-43494","description":"Jenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) does not exclude sensitive build variables (e.g., password parameter values) from the search in the build history widget, allowing attackers with Item/Read permission to obtain values of sensitive variables used in builds by iteratively testing different characters until the correct sequence is discovered."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28389","versionConstraint":"< 1.1.1w-0+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-28389","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u7"],"available":[{"date":"2026-06-10","kind":"first-observed","version":"1.1.1w-0+deb11u7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-08","epss":0.02435,"percentile":0.83783}],"risk":1.8262500000000002,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-28389","description":"Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen.  Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service.  When a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is processed, the optional parameters field of KeyEncryptionAlgorithmIdentifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing.  Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-28389","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-08","epss":0.02435,"percentile":0.83783}],"urls":["https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5","https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616","https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f","https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a","https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28389","description":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28389","versionConstraint":"< 1.1.1w-0+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-28389","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u7"],"available":[{"date":"2026-06-10","kind":"first-observed","version":"1.1.1w-0+deb11u7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-08","epss":0.02435,"percentile":0.83783}],"risk":1.8262500000000002,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-28389","description":"Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen.  Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service.  When a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is processed, the optional parameters field of KeyEncryptionAlgorithmIdentifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing.  Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-28389","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-08","epss":0.02435,"percentile":0.83783}],"urls":["https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5","https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616","https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f","https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a","https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28389","description":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-27534","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27534","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27534","cwe":"CWE-22","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27534","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27534","date":"2026-10-08","epss":0.02195,"percentile":0.81928}],"risk":1.7889250000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27534","description":"A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user."},"relatedVulnerabilities":[{"id":"CVE-2023-27534","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27534","cwe":"CWE-22","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27534","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27534","date":"2026-10-08","epss":0.02195,"percentile":0.81928}],"urls":["https://hackerone.com/reports/1892351","https://lists.debian.org/debian-lts-announce/2024/03/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0012/","https://advisory.splunk.com/advisories/SVD-2023-0809","https://curl.se/docs/CVE-2023-27534.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27534","description":"A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-27534","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27534","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27534","cwe":"CWE-22","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27534","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27534","date":"2026-10-08","epss":0.02195,"percentile":0.81928}],"risk":1.7889250000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27534","description":"A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user."},"relatedVulnerabilities":[{"id":"CVE-2023-27534","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27534","cwe":"CWE-22","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27534","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27534","date":"2026-10-08","epss":0.02195,"percentile":0.81928}],"urls":["https://hackerone.com/reports/1892351","https://lists.debian.org/debian-lts-announce/2024/03/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0012/","https://advisory.splunk.com/advisories/SVD-2023-0809","https://curl.se/docs/CVE-2023-27534.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27534","description":"A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-27534","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27534","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27534","cwe":"CWE-22","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27534","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27534","date":"2026-10-08","epss":0.02195,"percentile":0.81928}],"risk":1.7889250000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27534","description":"A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user."},"relatedVulnerabilities":[{"id":"CVE-2023-27534","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27534","cwe":"CWE-22","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27534","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27534","date":"2026-10-08","epss":0.02195,"percentile":0.81928}],"urls":["https://hackerone.com/reports/1892351","https://lists.debian.org/debian-lts-announce/2024/03/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0012/","https://advisory.splunk.com/advisories/SVD-2023-0809","https://curl.se/docs/CVE-2023-27534.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27534","description":"A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user."}]},{"artifact":{"id":"0febc9b71cc5977c","cpes":["cpe:2.3:a:org.eclipse.jgit-parent:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit-parent:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit-parent:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit-parent:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*"],"name":"org.eclipse.jgit","purl":"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.5.0.202303070854-r","type":"java-archive","version":"6.5.0.202303070854-r","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jgit","virtualPath":"/usr/share/jenkins/ref/plugins/blueocean-git-pipeline.jpi:WEB-INF/lib/org.eclipse.jgit-6.5.0.202303070854-r.jar","manifestName":"","pomArtifactID":"org.eclipse.jgit","archiveDigests":[{"value":"a846f632cf00da830745b721807d05ddf3e0790f","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/blueocean-git-pipeline.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/blueocean-git-pipeline.jpi:WEB-INF/lib/org.eclipse.jgit-6.5.0.202303070854-r.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"6.6.1.202309021850-r"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3p86-9955-h393","versionConstraint":">=6.0.0.202111291000-r,<=6.6.0.202305301015-r (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jgit:org.eclipse.jgit","version":"6.5.0.202303070854-r"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-3p86-9955-h393","fix":{"state":"fixed","versions":["6.6.1.202309021850-r"],"available":[{"date":"2023-09-19","kind":"first-observed","version":"6.6.1.202309021850-r"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4759","cwe":"CWE-59","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2023-4759","cwe":"CWE-178","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2023-4759","cwe":"CWE-59","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-4759","cwe":"CWE-178","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4759","date":"2026-10-08","epss":0.02194,"percentile":0.8192}],"risk":1.7881100000000003,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-4759","https://git.eclipse.org/c/jgit/jgit.git/commit/?id=9072103f3b3cf64dd12ad2949836ab98f62dabf1","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/11","https://projects.eclipse.org/projects/technology.jgit/releases/6.6.1","https://github.com/eclipse-jgit/jgit/issues/30","https://projects.eclipse.org/projects/technology.jgit/releases/5.13.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3p86-9955-h393","description":"Arbitrary File Overwrite in Eclipse JGit"},"relatedVulnerabilities":[{"id":"CVE-2023-4759","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4759","cwe":"CWE-59","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2023-4759","cwe":"CWE-178","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2023-4759","cwe":"CWE-59","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-4759","cwe":"CWE-178","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4759","date":"2026-10-08","epss":0.02194,"percentile":0.8192}],"urls":["https://git.eclipse.org/c/jgit/jgit.git/commit/?id=9072103f3b3cf64dd12ad2949836ab98f62dabf1","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/11","https://projects.eclipse.org/projects/technology.jgit/releases/6.6.1"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4759","description":"Arbitrary File Overwrite in Eclipse JGit <= 6.6.0\n\nIn Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.\n\nThis can happen on checkout (DirCacheCheckout), merge (ResolveMerger via its WorkingTreeUpdater), pull (PullCommand using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.\n\nThe issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.\n\nSetting git configuration option core.symlinks = false before checking out avoids the problem.\n\nThe issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via  Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/  and  repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ . A backport is available in 5.13.3 starting from  5.13.3.202401111512-r.\n\n\nThe JGit maintainers would like to thank RyotaK for finding and reporting this issue."}]},{"artifact":{"id":"4479f0b503eeee9d","cpes":["cpe:2.3:a:org.eclipse.jgit-parent:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit-parent:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit-parent:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit-parent:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*"],"name":"org.eclipse.jgit","purl":"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.5.0.202303070854-r","type":"java-archive","version":"6.5.0.202303070854-r","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jgit","virtualPath":"/usr/share/jenkins/ref/plugins/git-client.jpi:WEB-INF/lib/org.eclipse.jgit-6.5.0.202303070854-r.jar","manifestName":"","pomArtifactID":"org.eclipse.jgit","archiveDigests":[{"value":"a846f632cf00da830745b721807d05ddf3e0790f","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/git-client.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/git-client.jpi:WEB-INF/lib/org.eclipse.jgit-6.5.0.202303070854-r.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"6.6.1.202309021850-r"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3p86-9955-h393","versionConstraint":">=6.0.0.202111291000-r,<=6.6.0.202305301015-r (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jgit:org.eclipse.jgit","version":"6.5.0.202303070854-r"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-3p86-9955-h393","fix":{"state":"fixed","versions":["6.6.1.202309021850-r"],"available":[{"date":"2023-09-19","kind":"first-observed","version":"6.6.1.202309021850-r"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4759","cwe":"CWE-59","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2023-4759","cwe":"CWE-178","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2023-4759","cwe":"CWE-59","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-4759","cwe":"CWE-178","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4759","date":"2026-10-08","epss":0.02194,"percentile":0.8192}],"risk":1.7881100000000003,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-4759","https://git.eclipse.org/c/jgit/jgit.git/commit/?id=9072103f3b3cf64dd12ad2949836ab98f62dabf1","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/11","https://projects.eclipse.org/projects/technology.jgit/releases/6.6.1","https://github.com/eclipse-jgit/jgit/issues/30","https://projects.eclipse.org/projects/technology.jgit/releases/5.13.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3p86-9955-h393","description":"Arbitrary File Overwrite in Eclipse JGit"},"relatedVulnerabilities":[{"id":"CVE-2023-4759","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4759","cwe":"CWE-59","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2023-4759","cwe":"CWE-178","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2023-4759","cwe":"CWE-59","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-4759","cwe":"CWE-178","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4759","date":"2026-10-08","epss":0.02194,"percentile":0.8192}],"urls":["https://git.eclipse.org/c/jgit/jgit.git/commit/?id=9072103f3b3cf64dd12ad2949836ab98f62dabf1","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/11","https://projects.eclipse.org/projects/technology.jgit/releases/6.6.1"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4759","description":"Arbitrary File Overwrite in Eclipse JGit <= 6.6.0\n\nIn Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.\n\nThis can happen on checkout (DirCacheCheckout), merge (ResolveMerger via its WorkingTreeUpdater), pull (PullCommand using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.\n\nThe issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.\n\nSetting git configuration option core.symlinks = false before checking out avoids the problem.\n\nThe issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via  Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/  and  repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ . A backport is available in 5.13.3 starting from  5.13.3.202401111512-r.\n\n\nThe JGit maintainers would like to thank RyotaK for finding and reporting this issue."}]},{"artifact":{"id":"5aa5fc0ebbc6f0c0","cpes":["cpe:2.3:a:org.jenkins-ci.main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:org.jenkins-ci.main:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins_core:2.407:*:*:*:*:*:*:*"],"name":"jenkins-core","purl":"pkg:maven/org.jenkins-ci.main/jenkins-core@2.407","type":"java-archive","version":"2.407","language":"java","licenses":["The MIT license"],"metadata":{"pomGroupID":"org.jenkins-ci.main","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","manifestName":"","pomArtifactID":"jenkins-core","archiveDigests":[{"value":"e7fc0a769dfabd6c316cde23c6bd1dd8a7c4d94b","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.555.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-g2xq-2v27-4rh3","versionConstraint":"<2.555.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.main:jenkins-core","version":"2.407"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-g2xq-2v27-4rh3","fix":{"state":"fixed","versions":["2.555.3"],"available":[{"date":"2026-08-14","kind":"first-observed","version":"2.555.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-53435","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-53435","cwe":"CWE-502","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-53435","date":"2026-10-08","epss":0.02163,"percentile":0.81675}],"risk":1.762845,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-53435","https://www.jenkins.io/security/advisory/2026-06-10/#SECURITY-3707","https://access.redhat.com/security/cve/CVE-2026-53435","https://bugzilla.redhat.com/show_bug.cgi?id=2487539","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53435.json","https://github.com/jenkinsci/jenkins/commit/345a3190a49d1ac96c4ff1c2e9eef4102c8d63f6","https://github.com/jenkinsci/jenkins/commit/d739f6a6266d","https://access.redhat.com/errata/RHSA-2026:60259","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60239"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-g2xq-2v27-4rh3","description":"Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation"},"relatedVulnerabilities":[{"id":"CVE-2026-53435","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-53435","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-53435","cwe":"CWE-502","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-53435","date":"2026-10-08","epss":0.02163,"percentile":0.81675}],"urls":["https://www.jenkins.io/security/advisory/2026-06-10/#SECURITY-3707","https://access.redhat.com/errata/RHSA-2026:60239","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60259","https://access.redhat.com/security/cve/CVE-2026-53435","https://bugzilla.redhat.com/show_bug.cgi?id=2487539","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53435.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-53435","description":"In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins core or plugins from an attacker-controlled `config.xml` submission in a way that allows them to handle HTTP requests afterwards.\nThis can be used to impersonate any user and send HTTP requests on their behalf, up to and including use of the Script Console to run arbitrary code, or to read arbitrary files from the Jenkins controller."}]},{"artifact":{"id":"27fad96c0f70601c","cpes":["cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.7-6:*:*:*:*:*:*:*"],"name":"libgcrypt20","purl":"pkg:deb/debian/libgcrypt20@1.8.7-6?arch=amd64&distro=debian-11.7","type":"deb","version":"1.8.7-6","language":"","licenses":["sha256:8f11910ef604ead72fbdc0c0caa641e3f955f66c4868175310ed7290e32b0f37"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgcrypt20/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgcrypt20/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgcrypt20:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgcrypt20:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-33560","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"libgcrypt20","version":"1.8.7-6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2021-33560","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-33560","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-33560","cwe":"CWE-325","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-33560","date":"2026-10-08","epss":0.02342,"percentile":0.83115}],"risk":1.7565000000000002,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2021-33560","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP."},"relatedVulnerabilities":[{"id":"CVE-2021-33560","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-33560","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-33560","cwe":"CWE-325","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-33560","date":"2026-10-08","epss":0.02342,"percentile":0.83115}],"urls":["https://dev.gnupg.org/T5305","https://dev.gnupg.org/T5328","https://dev.gnupg.org/T5466","https://dev.gnupg.org/rCe8b7f10be275bcedb5fc05ed4837a89bfd605c61","https://lists.debian.org/debian-lts-announce/2021/06/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BKKTOIGFW2SGN3DO2UHHVZ7MJSYN4AAB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7OAPCUGPF3VLA7QAJUQSL255D4ITVTL/","https://security.gentoo.org/glsa/202210-13","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-33560","description":"Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.24.12"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-4341","versionConstraint":"<1.24.12||>=1.25.0,<1.25.6 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-4341","fix":{"state":"fixed","versions":["1.24.12","1.25.6"],"available":[{"date":"2026-01-15","kind":"release","version":"1.24.12"},{"date":"2026-01-15","kind":"release","version":"1.25.6"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-61726","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2025-61726","cwe":"CWE-770","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2025-61726","date":"2026-10-08","epss":0.02326,"percentile":0.82985}],"risk":1.7445,"urls":["https://go.dev/issue/77101","https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/736712","description":"The net/url package does not set a limit on the number of query parameters in a query.\n\nWhile the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption."},"relatedVulnerabilities":[{"id":"CVE-2025-61726","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-61726","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2025-61726","cwe":"CWE-770","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2025-61726","date":"2026-10-08","epss":0.02326,"percentile":0.82985}],"urls":["https://go.dev/cl/736712","https://go.dev/issue/77101","https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc","https://pkg.go.dev/vuln/GO-2026-4341","https://access.redhat.com/errata/RHSA-2026:10096","https://access.redhat.com/errata/RHSA-2026:10104","https://access.redhat.com/errata/RHSA-2026:10184","https://access.redhat.com/errata/RHSA-2026:10225","https://access.redhat.com/errata/RHSA-2026:10250","https://access.redhat.com/errata/RHSA-2026:11408","https://access.redhat.com/errata/RHSA-2026:11414","https://access.redhat.com/errata/RHSA-2026:11747","https://access.redhat.com/errata/RHSA-2026:11749","https://access.redhat.com/errata/RHSA-2026:12028","https://access.redhat.com/errata/RHSA-2026:12029","https://access.redhat.com/errata/RHSA-2026:12030","https://access.redhat.com/errata/RHSA-2026:12031","https://access.redhat.com/errata/RHSA-2026:12032","https://access.redhat.com/errata/RHSA-2026:12033","https://access.redhat.com/errata/RHSA-2026:12279","https://access.redhat.com/errata/RHSA-2026:12282","https://access.redhat.com/errata/RHSA-2026:13542","https://access.redhat.com/errata/RHSA-2026:13548","https://access.redhat.com/errata/RHSA-2026:13571","https://access.redhat.com/errata/RHSA-2026:14100","https://access.redhat.com/errata/RHSA-2026:14774","https://access.redhat.com/errata/RHSA-2026:14868","https://access.redhat.com/errata/RHSA-2026:14879","https://access.redhat.com/errata/RHSA-2026:15091","https://access.redhat.com/errata/RHSA-2026:15984","https://access.redhat.com/errata/RHSA-2026:16102","https://access.redhat.com/errata/RHSA-2026:16696","https://access.redhat.com/errata/RHSA-2026:17040","https://access.redhat.com/errata/RHSA-2026:17084","https://access.redhat.com/errata/RHSA-2026:17446","https://access.redhat.com/errata/RHSA-2026:17460","https://access.redhat.com/errata/RHSA-2026:17463","https://access.redhat.com/errata/RHSA-2026:17468","https://access.redhat.com/errata/RHSA-2026:17595","https://access.redhat.com/errata/RHSA-2026:17598","https://access.redhat.com/errata/RHSA-2026:18913","https://access.redhat.com/errata/RHSA-2026:19013","https://access.redhat.com/errata/RHSA-2026:19132","https://access.redhat.com/errata/RHSA-2026:19375","https://access.redhat.com/errata/RHSA-2026:19634","https://access.redhat.com/errata/RHSA-2026:19712","https://access.redhat.com/errata/RHSA-2026:20041","https://access.redhat.com/errata/RHSA-2026:21017","https://access.redhat.com/errata/RHSA-2026:21657","https://access.redhat.com/errata/RHSA-2026:21691","https://access.redhat.com/errata/RHSA-2026:22450","https://access.redhat.com/errata/RHSA-2026:22627","https://access.redhat.com/errata/RHSA-2026:22714","https://access.redhat.com/errata/RHSA-2026:22937","https://access.redhat.com/errata/RHSA-2026:23228","https://access.redhat.com/errata/RHSA-2026:23361","https://access.redhat.com/errata/RHSA-2026:24977","https://access.redhat.com/errata/RHSA-2026:25089","https://access.redhat.com/errata/RHSA-2026:25127","https://access.redhat.com/errata/RHSA-2026:25248","https://access.redhat.com/errata/RHSA-2026:25250","https://access.redhat.com/errata/RHSA-2026:25251","https://access.redhat.com/errata/RHSA-2026:25252","https://access.redhat.com/errata/RHSA-2026:25253","https://access.redhat.com/errata/RHSA-2026:26420","https://access.redhat.com/errata/RHSA-2026:26527","https://access.redhat.com/errata/RHSA-2026:26541","https://access.redhat.com/errata/RHSA-2026:26636","https://access.redhat.com/errata/RHSA-2026:2681","https://access.redhat.com/errata/RHSA-2026:2706","https://access.redhat.com/errata/RHSA-2026:2708","https://access.redhat.com/errata/RHSA-2026:2709","https://access.redhat.com/errata/RHSA-2026:2754","https://access.redhat.com/errata/RHSA-2026:28047","https://access.redhat.com/errata/RHSA-2026:2844","https://access.redhat.com/errata/RHSA-2026:28441","https://access.redhat.com/errata/RHSA-2026:28886","https://access.redhat.com/errata/RHSA-2026:28961","https://access.redhat.com/errata/RHSA-2026:2914","https://access.redhat.com/errata/RHSA-2026:2920","https://access.redhat.com/errata/RHSA-2026:3035","https://access.redhat.com/errata/RHSA-2026:3040","https://access.redhat.com/errata/RHSA-2026:3089","https://access.redhat.com/errata/RHSA-2026:3092","https://access.redhat.com/errata/RHSA-2026:3184","https://access.redhat.com/errata/RHSA-2026:3186","https://access.redhat.com/errata/RHSA-2026:3187","https://access.redhat.com/errata/RHSA-2026:3188","https://access.redhat.com/errata/RHSA-2026:3192","https://access.redhat.com/errata/RHSA-2026:3193","https://access.redhat.com/errata/RHSA-2026:3291","https://access.redhat.com/errata/RHSA-2026:3296","https://access.redhat.com/errata/RHSA-2026:3297","https://access.redhat.com/errata/RHSA-2026:3298","https://access.redhat.com/errata/RHSA-2026:3336","https://access.redhat.com/errata/RHSA-2026:3337","https://access.redhat.com/errata/RHSA-2026:3340","https://access.redhat.com/errata/RHSA-2026:3341","https://access.redhat.com/errata/RHSA-2026:3343","https://access.redhat.com/errata/RHSA-2026:3391","https://access.redhat.com/errata/RHSA-2026:3416","https://access.redhat.com/errata/RHSA-2026:3427","https://access.redhat.com/errata/RHSA-2026:3459","https://access.redhat.com/errata/RHSA-2026:3468","https://access.redhat.com/errata/RHSA-2026:3469","https://access.redhat.com/errata/RHSA-2026:3470","https://access.redhat.com/errata/RHSA-2026:3471","https://access.redhat.com/errata/RHSA-2026:3472","https://access.redhat.com/errata/RHSA-2026:3473","https://access.redhat.com/errata/RHSA-2026:3489","https://access.redhat.com/errata/RHSA-2026:3506","https://access.redhat.com/errata/RHSA-2026:3556","https://access.redhat.com/errata/RHSA-2026:3559","https://access.redhat.com/errata/RHSA-2026:3668","https://access.redhat.com/errata/RHSA-2026:3669","https://access.redhat.com/errata/RHSA-2026:36873","https://access.redhat.com/errata/RHSA-2026:36882","https://access.redhat.com/errata/RHSA-2026:3699","https://access.redhat.com/errata/RHSA-2026:3713","https://access.redhat.com/errata/RHSA-2026:37275","https://access.redhat.com/errata/RHSA-2026:3752","https://access.redhat.com/errata/RHSA-2026:3753","https://access.redhat.com/errata/RHSA-2026:3782","https://access.redhat.com/errata/RHSA-2026:3812","https://access.redhat.com/errata/RHSA-2026:3813","https://access.redhat.com/errata/RHSA-2026:3814","https://access.redhat.com/errata/RHSA-2026:3815","https://access.redhat.com/errata/RHSA-2026:3816","https://access.redhat.com/errata/RHSA-2026:3817","https://access.redhat.com/errata/RHSA-2026:3818","https://access.redhat.com/errata/RHSA-2026:3820","https://access.redhat.com/errata/RHSA-2026:3821","https://access.redhat.com/errata/RHSA-2026:3822","https://access.redhat.com/errata/RHSA-2026:3831","https://access.redhat.com/errata/RHSA-2026:3833","https://access.redhat.com/errata/RHSA-2026:3835","https://access.redhat.com/errata/RHSA-2026:3836","https://access.redhat.com/errata/RHSA-2026:3838","https://access.redhat.com/errata/RHSA-2026:3839","https://access.redhat.com/errata/RHSA-2026:3840","https://access.redhat.com/errata/RHSA-2026:3841","https://access.redhat.com/errata/RHSA-2026:3843","https://access.redhat.com/errata/RHSA-2026:3854","https://access.redhat.com/errata/RHSA-2026:3855","https://access.redhat.com/errata/RHSA-2026:3856","https://access.redhat.com/errata/RHSA-2026:3864","https://access.redhat.com/errata/RHSA-2026:3869","https://access.redhat.com/errata/RHSA-2026:3874","https://access.redhat.com/errata/RHSA-2026:3875","https://access.redhat.com/errata/RHSA-2026:3879","https://access.redhat.com/errata/RHSA-2026:3880","https://access.redhat.com/errata/RHSA-2026:3884","https://access.redhat.com/errata/RHSA-2026:3898","https://access.redhat.com/errata/RHSA-2026:3905","https://access.redhat.com/errata/RHSA-2026:3906","https://access.redhat.com/errata/RHSA-2026:3928","https://access.redhat.com/errata/RHSA-2026:3929","https://access.redhat.com/errata/RHSA-2026:3930","https://access.redhat.com/errata/RHSA-2026:3931","https://access.redhat.com/errata/RHSA-2026:3932","https://access.redhat.com/errata/RHSA-2026:3958","https://access.redhat.com/errata/RHSA-2026:3959","https://access.redhat.com/errata/RHSA-2026:3960","https://access.redhat.com/errata/RHSA-2026:3970","https://access.redhat.com/errata/RHSA-2026:3971","https://access.redhat.com/errata/RHSA-2026:3972","https://access.redhat.com/errata/RHSA-2026:3973","https://access.redhat.com/errata/RHSA-2026:3974","https://access.redhat.com/errata/RHSA-2026:3977","https://access.redhat.com/errata/RHSA-2026:39810","https://access.redhat.com/errata/RHSA-2026:3985","https://access.redhat.com/errata/RHSA-2026:40924","https://access.redhat.com/errata/RHSA-2026:4164","https://access.redhat.com/errata/RHSA-2026:4166","https://access.redhat.com/errata/RHSA-2026:4170","https://access.redhat.com/errata/RHSA-2026:4174","https://access.redhat.com/errata/RHSA-2026:4177","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:41941","https://access.redhat.com/errata/RHSA-2026:4211","https://access.redhat.com/errata/RHSA-2026:4220","https://access.redhat.com/errata/RHSA-2026:4256","https://access.redhat.com/errata/RHSA-2026:4264","https://access.redhat.com/errata/RHSA-2026:4267","https://access.redhat.com/errata/RHSA-2026:4270","https://access.redhat.com/errata/RHSA-2026:4276","https://access.redhat.com/errata/RHSA-2026:4434","https://access.redhat.com/errata/RHSA-2026:4435","https://access.redhat.com/errata/RHSA-2026:4460","https://access.redhat.com/errata/RHSA-2026:4466","https://access.redhat.com/errata/RHSA-2026:4467","https://access.redhat.com/errata/RHSA-2026:4498","https://access.redhat.com/errata/RHSA-2026:4500","https://access.redhat.com/errata/RHSA-2026:4510","https://access.redhat.com/errata/RHSA-2026:4511","https://access.redhat.com/errata/RHSA-2026:4672","https://access.redhat.com/errata/RHSA-2026:46903","https://access.redhat.com/errata/RHSA-2026:4753","https://access.redhat.com/errata/RHSA-2026:4892","https://access.redhat.com/errata/RHSA-2026:4901","https://access.redhat.com/errata/RHSA-2026:4907","https://access.redhat.com/errata/RHSA-2026:4939","https://access.redhat.com/errata/RHSA-2026:4942","https://access.redhat.com/errata/RHSA-2026:4943","https://access.redhat.com/errata/RHSA-2026:4952","https://access.redhat.com/errata/RHSA-2026:49944","https://access.redhat.com/errata/RHSA-2026:5022","https://access.redhat.com/errata/RHSA-2026:5030","https://access.redhat.com/errata/RHSA-2026:5031","https://access.redhat.com/errata/RHSA-2026:5076","https://access.redhat.com/errata/RHSA-2026:5077","https://access.redhat.com/errata/RHSA-2026:5078","https://access.redhat.com/errata/RHSA-2026:5079","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:5110","https://access.redhat.com/errata/RHSA-2026:51288","https://access.redhat.com/errata/RHSA-2026:5129","https://access.redhat.com/errata/RHSA-2026:5130","https://access.redhat.com/errata/RHSA-2026:5131","https://access.redhat.com/errata/RHSA-2026:5132","https://access.redhat.com/errata/RHSA-2026:5145","https://access.redhat.com/errata/RHSA-2026:5146","https://access.redhat.com/errata/RHSA-2026:5168","https://access.redhat.com/errata/RHSA-2026:5327","https://access.redhat.com/errata/RHSA-2026:5394","https://access.redhat.com/errata/RHSA-2026:5439","https://access.redhat.com/errata/RHSA-2026:5444","https://access.redhat.com/errata/RHSA-2026:5447","https://access.redhat.com/errata/RHSA-2026:5452","https://access.redhat.com/errata/RHSA-2026:5461","https://access.redhat.com/errata/RHSA-2026:5463","https://access.redhat.com/errata/RHSA-2026:54757","https://access.redhat.com/errata/RHSA-2026:5533","https://access.redhat.com/errata/RHSA-2026:5544","https://access.redhat.com/errata/RHSA-2026:5549","https://access.redhat.com/errata/RHSA-2026:5636","https://access.redhat.com/errata/RHSA-2026:56366","https://access.redhat.com/errata/RHSA-2026:56431","https://access.redhat.com/errata/RHSA-2026:5645","https://access.redhat.com/errata/RHSA-2026:5649","https://access.redhat.com/errata/RHSA-2026:5665","https://access.redhat.com/errata/RHSA-2026:57013","https://access.redhat.com/errata/RHSA-2026:5807","https://access.redhat.com/errata/RHSA-2026:5851","https://access.redhat.com/errata/RHSA-2026:5852","https://access.redhat.com/errata/RHSA-2026:5853","https://access.redhat.com/errata/RHSA-2026:5948","https://access.redhat.com/errata/RHSA-2026:5950","https://access.redhat.com/errata/RHSA-2026:5952","https://access.redhat.com/errata/RHSA-2026:5968","https://access.redhat.com/errata/RHSA-2026:6184","https://access.redhat.com/errata/RHSA-2026:6192","https://access.redhat.com/errata/RHSA-2026:6226","https://access.redhat.com/errata/RHSA-2026:6251","https://access.redhat.com/errata/RHSA-2026:6277","https://access.redhat.com/errata/RHSA-2026:6278","https://access.redhat.com/errata/RHSA-2026:6428","https://access.redhat.com/errata/RHSA-2026:6429","https://access.redhat.com/errata/RHSA-2026:6497","https://access.redhat.com/errata/RHSA-2026:6554","https://access.redhat.com/errata/RHSA-2026:6564","https://access.redhat.com/errata/RHSA-2026:6567","https://access.redhat.com/errata/RHSA-2026:6568","https://access.redhat.com/errata/RHSA-2026:66401","https://access.redhat.com/errata/RHSA-2026:7052","https://access.redhat.com/errata/RHSA-2026:7249","https://access.redhat.com/errata/RHSA-2026:7291","https://access.redhat.com/errata/RHSA-2026:7385","https://access.redhat.com/errata/RHSA-2026:7676","https://access.redhat.com/errata/RHSA-2026:7854","https://access.redhat.com/errata/RHSA-2026:7942","https://access.redhat.com/errata/RHSA-2026:8151","https://access.redhat.com/errata/RHSA-2026:8167","https://access.redhat.com/errata/RHSA-2026:8218","https://access.redhat.com/errata/RHSA-2026:8229","https://access.redhat.com/errata/RHSA-2026:8337","https://access.redhat.com/errata/RHSA-2026:8338","https://access.redhat.com/errata/RHSA-2026:8431","https://access.redhat.com/errata/RHSA-2026:8433","https://access.redhat.com/errata/RHSA-2026:8483","https://access.redhat.com/errata/RHSA-2026:9097","https://access.redhat.com/errata/RHSA-2026:9098","https://access.redhat.com/errata/RHSA-2026:9108","https://access.redhat.com/errata/RHSA-2026:9109","https://access.redhat.com/errata/RHSA-2026:9848","https://access.redhat.com/security/cve/CVE-2025-61726","https://bugzilla.redhat.com/show_bug.cgi?id=2434432","https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-61726","description":"The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-7592","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-7592","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-7592","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.6","3.13.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0rc2"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7592","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2024-7592","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7592","date":"2026-10-08","epss":0.02303,"percentile":0.82804}],"risk":1.72725,"urls":["https://github.com/python/cpython/commit/391e5626e3ee5af267b97e37abc7475732e67621","https://github.com/python/cpython/commit/44e458357fca05ca0ae2658d62c8c595b048b5ef","https://github.com/python/cpython/commit/a77ab24427a18bff817025adb03ca920dc3f1a06","https://github.com/python/cpython/commit/b2f11ca7667e4d57c71c1c88b255115f16042d9a","https://github.com/python/cpython/commit/d4ac921a4b081f7f996a5d2b101684b67ba0ed7f","https://github.com/python/cpython/commit/d662e2db2605515a767f88ad48096b8ac623c774","https://github.com/python/cpython/commit/dcc3eaef98cd94d6cb6cb0f44bd1c903d04f33b1","https://github.com/python/cpython/issues/123067","https://github.com/python/cpython/pull/123075","https://mail.python.org/archives/list/security-announce@python.org/thread/HXJAAAALNUNGCQUS2W7WR6GFIZIHFOOK/","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20241018-0006/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7592","description":"There is a LOW severity vulnerability affecting CPython, specifically the\n'http.cookies' standard library module.\n\n\nWhen parsing cookies that contained backslashes for quoted characters in\nthe cookie value, the parser would use an algorithm with quadratic\ncomplexity, resulting in excess CPU resources being used while parsing the\nvalue."},"relatedVulnerabilities":[]},{"artifact":{"id":"0c6d9eb7e240419d","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.18.3-6+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.18.3-6+deb11u5"],"available":[{"date":"2024-07-05","kind":"advisory","version":"1.18.3-6+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"risk":1.686015,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5726-1","link":"https://security-tracker.debian.org/tracker/DSA-5726-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"f494d08983d799f9","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.18.3-6+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.18.3-6+deb11u5"],"available":[{"date":"2024-07-05","kind":"advisory","version":"1.18.3-6+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"risk":1.686015,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5726-1","link":"https://security-tracker.debian.org/tracker/DSA-5726-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"f5bdc85523d7b0b5","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.18.3-6+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.18.3-6+deb11u5"],"available":[{"date":"2024-07-05","kind":"advisory","version":"1.18.3-6+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"risk":1.686015,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5726-1","link":"https://security-tracker.debian.org/tracker/DSA-5726-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"aabb6f84bfd71a76","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.18.3-6+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.18.3-6+deb11u5"],"available":[{"date":"2024-07-05","kind":"advisory","version":"1.18.3-6+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"risk":1.686015,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5726-1","link":"https://security-tracker.debian.org/tracker/DSA-5726-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-0727","versionConstraint":"< 1.1.1w-0+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-0727","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-08","epss":0.03187,"percentile":0.877}],"risk":1.6731750000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-0727","description":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack  Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly.  A file in PKCS12 format can contain certificates and keys and may come from an untrusted source. The PKCS12 specification allows certain fields to be NULL, but OpenSSL does not correctly check for this case. This can lead to a NULL pointer dereference that results in OpenSSL crashing. If an application processes PKCS12 files from an untrusted source using the OpenSSL APIs then that application will be vulnerable to this issue.  OpenSSL APIs that are vulnerable to this are: PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes() and PKCS12_newpass().  We have also fixed a similar issue in SMIME_write_PKCS7(). However since this function is related to writing data we do not consider it security significant.  The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2024-0727","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-08","epss":0.03187,"percentile":0.877}],"urls":["https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","https://www.openssl.org/news/secadv/20240125.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240208-0006/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0727","description":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-0727","versionConstraint":"< 1.1.1w-0+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-0727","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-08","epss":0.03187,"percentile":0.877}],"risk":1.6731750000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-0727","description":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack  Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly.  A file in PKCS12 format can contain certificates and keys and may come from an untrusted source. The PKCS12 specification allows certain fields to be NULL, but OpenSSL does not correctly check for this case. This can lead to a NULL pointer dereference that results in OpenSSL crashing. If an application processes PKCS12 files from an untrusted source using the OpenSSL APIs then that application will be vulnerable to this issue.  OpenSSL APIs that are vulnerable to this are: PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes() and PKCS12_newpass().  We have also fixed a similar issue in SMIME_write_PKCS7(). However since this function is related to writing data we do not consider it security significant.  The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2024-0727","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-08","epss":0.03187,"percentile":0.877}],"urls":["https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","https://www.openssl.org/news/secadv/20240125.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240208-0006/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0727","description":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6232","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6232","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-6232","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.6","3.13.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0rc2"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6232","cwe":"CWE-1333","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2024-6232","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-6232","date":"2026-10-08","epss":0.02203,"percentile":0.81998}],"risk":1.6522500000000002,"urls":["https://github.com/python/cpython/commit/34ddb64d088dd7ccc321f6103d23153256caa5d4","https://github.com/python/cpython/commit/4eaf4891c12589e3c7bdad5f5b076e4c8392dd06","https://github.com/python/cpython/commit/743acbe872485dc18df4d8ab2dc7895187f062c4","https://github.com/python/cpython/commit/7d1f50cd92ff7e10a1c15a8f591dde8a6843a64d","https://github.com/python/cpython/commit/b4225ca91547aa97ed3aca391614afbb255bc877","https://github.com/python/cpython/commit/d449caf8a179e3b954268b3a88eb9170be3c8fbf","https://github.com/python/cpython/commit/ed3a49ea734ada357ff4442996fd4ae71d253373","https://github.com/python/cpython/issues/121285","https://github.com/python/cpython/pull/121286","https://mail.python.org/archives/list/security-announce@python.org/thread/JRYFTPRHZRTLMZLWQEUHZSJXNHM4ACTY/","http://www.openwall.com/lists/oss-security/2024/09/03/5","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20241018-0007/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6232","description":"There is a MEDIUM severity vulnerability affecting CPython.\n\n\n\n\n\nRegular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives."},"relatedVulnerabilities":[]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-27533","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27533","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27533","cwe":"CWE-75","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27533","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27533","date":"2026-10-08","epss":0.01993,"percentile":0.80048}],"risk":1.6242950000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27533","description":"A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system."},"relatedVulnerabilities":[{"id":"CVE-2023-27533","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27533","cwe":"CWE-75","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27533","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27533","date":"2026-10-08","epss":0.01993,"percentile":0.80048}],"urls":["https://hackerone.com/reports/1891474","https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0011/","https://advisory.splunk.com/advisories/SVD-2023-0809","https://curl.se/docs/CVE-2023-27533.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27533","description":"A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-27533","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27533","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27533","cwe":"CWE-75","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27533","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27533","date":"2026-10-08","epss":0.01993,"percentile":0.80048}],"risk":1.6242950000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27533","description":"A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system."},"relatedVulnerabilities":[{"id":"CVE-2023-27533","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27533","cwe":"CWE-75","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27533","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27533","date":"2026-10-08","epss":0.01993,"percentile":0.80048}],"urls":["https://hackerone.com/reports/1891474","https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0011/","https://advisory.splunk.com/advisories/SVD-2023-0809","https://curl.se/docs/CVE-2023-27533.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27533","description":"A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-27533","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27533","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27533","cwe":"CWE-75","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27533","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27533","date":"2026-10-08","epss":0.01993,"percentile":0.80048}],"risk":1.6242950000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27533","description":"A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system."},"relatedVulnerabilities":[{"id":"CVE-2023-27533","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27533","cwe":"CWE-75","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27533","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27533","date":"2026-10-08","epss":0.01993,"percentile":0.80048}],"urls":["https://hackerone.com/reports/1891474","https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0011/","https://advisory.splunk.com/advisories/SVD-2023-0809","https://curl.se/docs/CVE-2023-27533.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27533","description":"A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system."}]},{"artifact":{"id":"0c6d9eb7e240419d","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-36054","versionConstraint":"< 1.18.3-6+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-36054","fix":{"state":"fixed","versions":["1.18.3-6+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.18.3-6+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-08","epss":0.02814,"percentile":0.86119}],"risk":1.6180499999999998,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-36054","description":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."},"relatedVulnerabilities":[{"id":"CVE-2023-36054","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-08","epss":0.02814,"percentile":0.86119}],"urls":["https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd","https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final","https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final","https://lists.debian.org/debian-lts-announce/2023/10/msg00031.html","https://security.netapp.com/advisory/ntap-20230908-0004/","https://web.mit.edu/kerberos/www/advisories/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-36054","description":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."}]},{"artifact":{"id":"f494d08983d799f9","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-36054","versionConstraint":"< 1.18.3-6+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-36054","fix":{"state":"fixed","versions":["1.18.3-6+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.18.3-6+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-08","epss":0.02814,"percentile":0.86119}],"risk":1.6180499999999998,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-36054","description":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."},"relatedVulnerabilities":[{"id":"CVE-2023-36054","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-08","epss":0.02814,"percentile":0.86119}],"urls":["https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd","https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final","https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final","https://lists.debian.org/debian-lts-announce/2023/10/msg00031.html","https://security.netapp.com/advisory/ntap-20230908-0004/","https://web.mit.edu/kerberos/www/advisories/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-36054","description":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."}]},{"artifact":{"id":"f5bdc85523d7b0b5","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-36054","versionConstraint":"< 1.18.3-6+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-36054","fix":{"state":"fixed","versions":["1.18.3-6+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.18.3-6+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-08","epss":0.02814,"percentile":0.86119}],"risk":1.6180499999999998,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-36054","description":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."},"relatedVulnerabilities":[{"id":"CVE-2023-36054","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-08","epss":0.02814,"percentile":0.86119}],"urls":["https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd","https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final","https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final","https://lists.debian.org/debian-lts-announce/2023/10/msg00031.html","https://security.netapp.com/advisory/ntap-20230908-0004/","https://web.mit.edu/kerberos/www/advisories/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-36054","description":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."}]},{"artifact":{"id":"aabb6f84bfd71a76","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-36054","versionConstraint":"< 1.18.3-6+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-36054","fix":{"state":"fixed","versions":["1.18.3-6+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.18.3-6+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-08","epss":0.02814,"percentile":0.86119}],"risk":1.6180499999999998,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-36054","description":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."},"relatedVulnerabilities":[{"id":"CVE-2023-36054","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36054","cwe":"CWE-824","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36054","date":"2026-10-08","epss":0.02814,"percentile":0.86119}],"urls":["https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd","https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final","https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final","https://lists.debian.org/debian-lts-announce/2023/10/msg00031.html","https://security.netapp.com/advisory/ntap-20230908-0004/","https://web.mit.edu/kerberos/www/advisories/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-36054","description":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."}]},{"artifact":{"id":"b75fec81ab65acf9","cpes":["cpe:2.3:a:org.springframework.security:spring-security-web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.security:spring_security_web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security-web:spring-security-web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security-web:spring_security_web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security_web:spring-security-web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security_web:spring_security_web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.security:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security:spring-security-web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security:spring_security_web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security:spring-security-web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security:spring_security_web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-security-web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_security_web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:security:spring-security-web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:security:spring_security_web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security-web:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security_web:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-security-web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_security_web:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:springframework:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:security:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring:security:5.8.3:*:*:*:*:*:*:*"],"name":"spring-security-web","purl":"pkg:maven/org.springframework.security/spring-security-web@5.8.3","type":"java-archive","version":"5.8.3","language":"java","licenses":[],"metadata":{"pomGroupID":"org.springframework.security","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-security-web-5.8.3.jar","manifestName":"","pomArtifactID":"spring-security-web","archiveDigests":[{"value":"d40969c72dc09136af810c6e9fc3d4b75ae39d46","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-security-web-5.8.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.8.15"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c4q5-6c82-3qpw","versionConstraint":">=5.8.0,<5.8.15 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework.security:spring-security-web","version":"5.8.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-c4q5-6c82-3qpw","fix":{"state":"fixed","versions":["5.8.15"],"available":[{"date":"2024-10-29","kind":"first-observed","version":"5.8.15"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38821","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38821","date":"2026-10-08","epss":0.01741,"percentile":0.77052}],"risk":1.5843099999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-38821","https://spring.io/security/cve-2024-38821","https://github.com/spring-projects/spring-security/commit/0e257b56ce35402558a260ffa6b368982f9a7934","https://github.com/spring-projects/spring-security/commit/4ce7cde15599c0447163fd46bac616e03318bf5b","https://security.netapp.com/advisory/ntap-20250124-0006","https://github.com/spring-projects/spring-security/commit/b4f27777556c157ec5689c0769322c90be984514"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c4q5-6c82-3qpw","description":"Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications"},"relatedVulnerabilities":[{"id":"CVE-2024-38821","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38821","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38821","date":"2026-10-08","epss":0.01741,"percentile":0.77052}],"urls":["https://spring.io/security/cve-2024-38821","https://security.netapp.com/advisory/ntap-20250124-0006/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-38821","description":"Spring WebFlux applications that have Spring Security authorization rules on static resources can be bypassed under certain circumstances.\n\nFor this to impact an application, all of the following must be true:\n\n  *  It must be a WebFlux application\n  *  It must be using Spring's static resources support\n  *  It must have a non-permitAll authorization rule applied to the static resources support"}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1v-0~deb11u1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-3817","versionConstraint":"< 1.1.1v-0~deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-3817","fix":{"state":"fixed","versions":["1.1.1v-0~deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1v-0~deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3817","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3817","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3817","date":"2026-10-08","epss":0.03047,"percentile":0.87153}],"risk":1.569205,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-3817","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.  Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.  The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p.  An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack.  The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check().  Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the \"-check\" option.  The OpenSSL SSL/TLS implementation is not affected by this issue.  The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2023-3817","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3817","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3817","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3817","date":"2026-10-08","epss":0.03047,"percentile":0.87153}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5","https://www.openssl.org/news/secadv/20230731.txt","http://seclists.org/fulldisclosure/2023/Jul/43","http://www.openwall.com/lists/oss-security/2023/07/31/1","http://www.openwall.com/lists/oss-security/2023/09/22/11","http://www.openwall.com/lists/oss-security/2023/09/22/9","http://www.openwall.com/lists/oss-security/2023/11/06/2","https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230818-0014/","https://security.netapp.com/advisory/ntap-20231027-0008/","https://security.netapp.com/advisory/ntap-20240621-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3817","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the \"-check\" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1v-0~deb11u1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-3817","versionConstraint":"< 1.1.1v-0~deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-3817","fix":{"state":"fixed","versions":["1.1.1v-0~deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1v-0~deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3817","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3817","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3817","date":"2026-10-08","epss":0.03047,"percentile":0.87153}],"risk":1.569205,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-3817","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.  Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.  The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p.  An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack.  The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check().  Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the \"-check\" option.  The OpenSSL SSL/TLS implementation is not affected by this issue.  The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2023-3817","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3817","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3817","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3817","date":"2026-10-08","epss":0.03047,"percentile":0.87153}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5","https://www.openssl.org/news/secadv/20230731.txt","http://seclists.org/fulldisclosure/2023/Jul/43","http://www.openwall.com/lists/oss-security/2023/07/31/1","http://www.openwall.com/lists/oss-security/2023/09/22/11","http://www.openwall.com/lists/oss-security/2023/09/22/9","http://www.openwall.com/lists/oss-security/2023/11/06/2","https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230818-0014/","https://security.netapp.com/advisory/ntap-20231027-0008/","https://security.netapp.com/advisory/ntap-20240621-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3817","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the \"-check\" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"41153a6441746464","cpes":["cpe:2.3:a:golang:x\\/sys:v0.0.0-20210615035016-665e8c7367d1:*:*:*:*:*:*:*"],"name":"golang.org/x/sys","purl":"pkg:golang/golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1","type":"go-module","version":"v0.0.0-20210615035016-665e8c7367d1","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.0.0-20220412211240-33da011f77ad"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-p782-xgp4-8hr8","versionConstraint":"<0.0.0-20220412211240-33da011f77ad (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/sys","version":"v0.0.0-20210615035016-665e8c7367d1"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-p782-xgp4-8hr8","fix":{"state":"fixed","versions":["0.0.0-20220412211240-33da011f77ad"],"available":[{"date":"2023-02-26","kind":"first-observed","version":"0.0.0-20220412211240-33da011f77ad"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-29526","cwe":"CWE-269","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-29526","date":"2026-10-08","epss":0.02951,"percentile":0.86767}],"risk":1.5197650000000003,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-29526","https://github.com/golang/go/issues/52313","https://groups.google.com/g/golang-announce","https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU","https://security.gentoo.org/glsa/202208-02","https://go.dev/cl/399539","https://go.dev/cl/400074","https://go.dev/issue/52313","https://pkg.go.dev/vuln/GO-2022-0493","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q6GE5EQGE4L2KRVGW4T75QVIYAXCLO5X","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR","https://security.netapp.com/advisory/ntap-20220729-0001"],"severity":"Medium","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-p782-xgp4-8hr8","description":"golang.org/x/sys/unix has Incorrect privilege reporting in syscall"},"relatedVulnerabilities":[{"id":"CVE-2022-29526","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-29526","cwe":"CWE-269","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-29526","date":"2026-10-08","epss":0.02951,"percentile":0.86767}],"urls":["https://github.com/golang/go/issues/52313","https://groups.google.com/g/golang-announce","https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6GE5EQGE4L2KRVGW4T75QVIYAXCLO5X/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/","https://security.gentoo.org/glsa/202208-02","https://security.netapp.com/advisory/ntap-20220729-0001/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-29526","description":"Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible."}]},{"artifact":{"id":"5cc15dd7c52f211d","cpes":["cpe:2.3:a:com.thoughtworks.xstream:xstream:1.4.20:*:*:*:*:*:*:*","cpe:2.3:a:thoughtworks:xstream:1.4.20:*:*:*:*:*:*:*","cpe:2.3:a:xstream:xstream:1.4.20:*:*:*:*:*:*:*"],"name":"xstream","purl":"pkg:maven/com.thoughtworks.xstream/xstream@1.4.20","type":"java-archive","version":"1.4.20","language":"java","licenses":["BSD-3-Clause"],"metadata":{"pomGroupID":"com.thoughtworks.xstream","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/xstream-1.4.20.jar","manifestName":"","pomArtifactID":"xstream","archiveDigests":[{"value":"0e2315b8b2e95e9f21697833c8e56cdd9c98a5ee","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/xstream-1.4.20.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.4.21"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hfq9-hggm-c56q","versionConstraint":"<1.4.21 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.thoughtworks.xstream:xstream","version":"1.4.20"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-hfq9-hggm-c56q","fix":{"state":"fixed","versions":["1.4.21"],"available":[{"date":"2024-11-08","kind":"first-observed","version":"1.4.21"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47072","cwe":"CWE-121","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-47072","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-47072","date":"2026-10-08","epss":0.02001,"percentile":0.80137}],"risk":1.510755,"urls":["https://github.com/x-stream/xstream/security/advisories/GHSA-hfq9-hggm-c56q","https://github.com/x-stream/xstream/commit/bb838ce2269cac47433e31c77b2b236466e9f266","https://github.com/x-stream/xstream/commit/fdd9f7d3de0d7ccf2f9979bcd09fbf3e6a0c881a","https://x-stream.github.io/CVE-2024-47072.html","https://nvd.nist.gov/vuln/detail/CVE-2024-47072","https://lists.debian.org/debian-lts-announce/2024/12/msg00023.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hfq9-hggm-c56q","description":"XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream"},"relatedVulnerabilities":[{"id":"CVE-2024-47072","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47072","cwe":"CWE-121","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-47072","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-47072","date":"2026-10-08","epss":0.02001,"percentile":0.80137}],"urls":["https://github.com/x-stream/xstream/commit/bb838ce2269cac47433e31c77b2b236466e9f266","https://github.com/x-stream/xstream/security/advisories/GHSA-hfq9-hggm-c56q","https://x-stream.github.io/CVE-2024-47072.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-47072","description":"XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream when XStream is configured to use the BinaryStreamDriver. XStream 1.4.21 has been patched to detect the manipulation in the binary input stream causing the the stack overflow and raises an InputManipulationException instead. Users are advised to upgrade. Users unable to upgrade may catch the StackOverflowError in the client code calling XStream if XStream is configured to use the BinaryStreamDriver."}]},{"artifact":{"id":"b122b189e6a8d66e","cpes":["cpe:2.3:a:apache:commons-beanutils:1.9.4:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:1.9.4:*:*:*:*:*:*:*"],"name":"commons-beanutils","purl":"pkg:maven/commons-beanutils/commons-beanutils@1.9.4","type":"java-archive","version":"1.9.4","language":"java","licenses":[],"metadata":{"pomGroupID":"commons-beanutils","virtualPath":"/opt/jenkins-plugin-manager.jar:commons-beanutils:commons-beanutils","manifestName":"","pomArtifactID":"commons-beanutils","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:28ce38a426e8c5f4d5c1503345486bf2d71355572ce12a34d66ff30128719565","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.11.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wxr5-93ph-8wr9","versionConstraint":">=1.0,<=1.10.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-beanutils:commons-beanutils","version":"1.9.4"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wxr5-93ph-8wr9","fix":{"state":"fixed","versions":["1.11.0"],"available":[{"date":"2025-05-29","kind":"first-observed","version":"1.11.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48734","cwe":"CWE-284","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2025-48734","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-48734","date":"2026-10-08","epss":0.01825,"percentile":0.78153}],"risk":1.487375,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-48734","https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9","https://github.com/apache/commons-beanutils/commit/bd20740da25b69552ddef8523beec0837297eaf9","http://www.openwall.com/lists/oss-security/2025/05/28/6","https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wxr5-93ph-8wr9","description":"Apache Commons Improper Access Control vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2025-48734","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48734","cwe":"CWE-284","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2025-48734","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-48734","date":"2026-10-08","epss":0.01825,"percentile":0.78153}],"urls":["https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9","http://www.openwall.com/lists/oss-security/2025/05/28/6","https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48734","description":"Improper Access Control vulnerability in Apache Commons.\n\n\n\nA special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default. PropertyUtilsBean (and consequently BeanUtilsBean) now disallows declared class level property access by default.\n\n\n\n\n\nReleases 1.11.0 and 2.0.0-M2 address a potential security issue when accessing enum properties in an uncontrolled way. If an application using Commons BeanUtils passes property paths from an external source directly to the getProperty() method of PropertyUtilsBean, an attacker can access the enum’s class loader via the “declaredClass” property available on all Java “enum” objects. Accessing the enum’s “declaredClass” allows remote attackers to access the ClassLoader and execute arbitrary code. The same issue exists with PropertyUtilsBean.getNestedProperty().\nStarting in versions 1.11.0 and 2.0.0-M2 a special BeanIntrospector suppresses the “declaredClass” property. Note that this new BeanIntrospector is enabled by default, but you can disable it to regain the old behavior; see section 2.5 of the user's guide and the unit tests.\n\nThis issue affects Apache Commons BeanUtils 1.x before 1.11.0, and 2.x before 2.0.0-M2.Users of the artifact commons-beanutils:commons-beanutils\n\n 1.x are recommended to upgrade to version 1.11.0, which fixes the issue.\n\n\nUsers of the artifact org.apache.commons:commons-beanutils2\n\n 2.x are recommended to upgrade to version 2.0.0-M2, which fixes the issue."}]},{"artifact":{"id":"3b7f2bcaaeaaeec0","cpes":["cpe:2.3:a:apache:commons-beanutils:1.9.4:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_beanutils:1.9.4:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:1.9.4:*:*:*:*:*:*:*"],"name":"commons-beanutils","purl":"pkg:maven/commons-beanutils/commons-beanutils@1.9.4","type":"java-archive","version":"1.9.4","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"commons-beanutils","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-beanutils-1.9.4.jar","manifestName":"","pomArtifactID":"commons-beanutils","archiveDigests":[{"value":"d52b9abcd97f38c81342bb7e7ae1eee9b73cba51","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-beanutils-1.9.4.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.11.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wxr5-93ph-8wr9","versionConstraint":">=1.0,<=1.10.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-beanutils:commons-beanutils","version":"1.9.4"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wxr5-93ph-8wr9","fix":{"state":"fixed","versions":["1.11.0"],"available":[{"date":"2025-05-29","kind":"first-observed","version":"1.11.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48734","cwe":"CWE-284","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2025-48734","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-48734","date":"2026-10-08","epss":0.01825,"percentile":0.78153}],"risk":1.487375,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-48734","https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9","https://github.com/apache/commons-beanutils/commit/bd20740da25b69552ddef8523beec0837297eaf9","http://www.openwall.com/lists/oss-security/2025/05/28/6","https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wxr5-93ph-8wr9","description":"Apache Commons Improper Access Control vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2025-48734","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48734","cwe":"CWE-284","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2025-48734","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-48734","date":"2026-10-08","epss":0.01825,"percentile":0.78153}],"urls":["https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9","http://www.openwall.com/lists/oss-security/2025/05/28/6","https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48734","description":"Improper Access Control vulnerability in Apache Commons.\n\n\n\nA special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default. PropertyUtilsBean (and consequently BeanUtilsBean) now disallows declared class level property access by default.\n\n\n\n\n\nReleases 1.11.0 and 2.0.0-M2 address a potential security issue when accessing enum properties in an uncontrolled way. If an application using Commons BeanUtils passes property paths from an external source directly to the getProperty() method of PropertyUtilsBean, an attacker can access the enum’s class loader via the “declaredClass” property available on all Java “enum” objects. Accessing the enum’s “declaredClass” allows remote attackers to access the ClassLoader and execute arbitrary code. The same issue exists with PropertyUtilsBean.getNestedProperty().\nStarting in versions 1.11.0 and 2.0.0-M2 a special BeanIntrospector suppresses the “declaredClass” property. Note that this new BeanIntrospector is enabled by default, but you can disable it to regain the old behavior; see section 2.5 of the user's guide and the unit tests.\n\nThis issue affects Apache Commons BeanUtils 1.x before 1.11.0, and 2.x before 2.0.0-M2.Users of the artifact commons-beanutils:commons-beanutils\n\n 1.x are recommended to upgrade to version 1.11.0, which fixes the issue.\n\n\nUsers of the artifact org.apache.commons:commons-beanutils2\n\n 2.x are recommended to upgrade to version 2.0.0-M2, which fixes the issue."}]},{"artifact":{"id":"5aa5fc0ebbc6f0c0","cpes":["cpe:2.3:a:org.jenkins-ci.main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:org.jenkins-ci.main:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins_core:2.407:*:*:*:*:*:*:*"],"name":"jenkins-core","purl":"pkg:maven/org.jenkins-ci.main/jenkins-core@2.407","type":"java-archive","version":"2.407","language":"java","licenses":["The MIT license"],"metadata":{"pomGroupID":"org.jenkins-ci.main","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","manifestName":"","pomArtifactID":"jenkins-core","archiveDigests":[{"value":"e7fc0a769dfabd6c316cde23c6bd1dd8a7c4d94b","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.452.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8pv9-qh96-9hc6","versionConstraint":"<2.452.4 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.main:jenkins-core","version":"2.407"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-8pv9-qh96-9hc6","fix":{"state":"fixed","versions":["2.452.4"],"available":[{"date":"2024-08-08","kind":"first-observed","version":"2.452.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-43045","cwe":"CWE-862","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-43045","cwe":"CWE-862","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-43045","date":"2026-10-08","epss":0.02869,"percentile":0.86383}],"risk":1.4847074999999998,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-43045","https://www.jenkins.io/security/advisory/2024-08-07/#SECURITY-3349","https://github.com/jenkinsci/jenkins/commit/0c13259cebc6a780fee7825838f4dd98ece8e68a","https://github.com/jenkinsci/jenkins/commit/3752f406bfef764e4954238acf44343169ae5799","https://github.com/jenkinsci/jenkins/commit/efece77d759b38c95b39b191051a8203bbc2f428"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8pv9-qh96-9hc6","description":"Jenkins does not perform a permission check in an HTTP endpoint"},"relatedVulnerabilities":[{"id":"CVE-2024-43045","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-43045","cwe":"CWE-862","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-43045","cwe":"CWE-862","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-43045","date":"2026-10-08","epss":0.02869,"percentile":0.86383}],"urls":["https://www.jenkins.io/security/advisory/2024-08-07/#SECURITY-3349"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-43045","description":"Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to access other users' \"My Views\"."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1752","versionConstraint":"<1.19.9||>=1.20.0-0,<1.20.4 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1752","fix":{"state":"fixed","versions":["1.19.9","1.20.4"],"available":[{"date":"2023-05-02","kind":"release","version":"1.19.9"},{"date":"2023-05-02","kind":"release","version":"1.20.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24540","cwe":"CWE-77","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24540","date":"2026-10-08","epss":0.0156,"percentile":0.74484}],"risk":1.4664,"urls":["https://go.dev/cl/491616","https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/59721","description":"Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set \"\\t\\n\\f\\r\\u0020\\u2028\\u2029\" in JavaScript contexts that also contain actions may not be properly sanitized during execution."},"relatedVulnerabilities":[{"id":"CVE-2023-24540","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24540","cwe":"CWE-77","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24540","date":"2026-10-08","epss":0.0156,"percentile":0.74484}],"urls":["https://go.dev/cl/491616","https://go.dev/issue/59721","https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU","https://pkg.go.dev/vuln/GO-2023-1752","https://security.netapp.com/advisory/ntap-20241115-0008/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-24540","description":"Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set \"\\t\\n\\f\\r\\u0020\\u2028\\u2029\" in JavaScript contexts that also contain actions may not be properly sanitized during execution."}]},{"artifact":{"id":"ec0ab62aa7565e21","cpes":["cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libldap-2.4-2:libldap_2.4_2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libldap_2.4_2:libldap-2.4-2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libldap_2.4_2:libldap_2.4_2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libldap-2.4:libldap-2.4-2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libldap-2.4:libldap_2.4_2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libldap_2.4:libldap-2.4-2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libldap_2.4:libldap_2.4_2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libldap:libldap-2.4-2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libldap:libldap_2.4_2:2.4.57\\+dfsg-3\\+deb11u1:*:*:*:*:*:*:*"],"name":"libldap-2.4-2","purl":"pkg:deb/debian/libldap-2.4-2@2.4.57%2Bdfsg-3%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=openldap","type":"deb","version":"2.4.57+dfsg-3+deb11u1","language":"","licenses":["sha256:0690f1ee382f98e95b446743db55395641d5e258de65939e9cb1c660d67a43a8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libldap-2.4-2/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libldap-2.4-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libldap-2.4-2:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libldap-2.4-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openldap"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-2953","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openldap","version":"2.4.57+dfsg-3+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-2953","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-2953","date":"2026-10-08","epss":0.0193,"percentile":0.7939}],"risk":1.4475000000000002,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-2953","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function."},"relatedVulnerabilities":[{"id":"CVE-2023-2953","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-2953","date":"2026-10-08","epss":0.0193,"percentile":0.7939}],"urls":["http://seclists.org/fulldisclosure/2023/Jul/47","http://seclists.org/fulldisclosure/2023/Jul/48","http://seclists.org/fulldisclosure/2023/Jul/52","https://access.redhat.com/security/cve/CVE-2023-2953","https://bugs.openldap.org/show_bug.cgi?id=9904","https://security.netapp.com/advisory/ntap-20230703-0005/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-2953","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1704","versionConstraint":"<1.19.8||>=1.20.0-0,<1.20.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1704","fix":{"state":"fixed","versions":["1.19.8","1.20.3"],"available":[{"date":"2023-04-04","kind":"release","version":"1.19.8"},{"date":"2023-04-04","kind":"release","version":"1.20.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24534","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24534","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24534","date":"2026-10-08","epss":0.01888,"percentile":0.78902}],"risk":1.4160000000000001,"urls":["https://go.dev/cl/481994","https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/58975","description":"HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service.\n\nCertain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate substantially more memory than required to hold the parsed headers. An attacker can exploit this behavior to cause an HTTP server to allocate large amounts of memory from a small request, potentially leading to memory exhaustion and a denial of service.\n\nWith fix, header parsing now correctly allocates only the memory required to hold parsed headers."},"relatedVulnerabilities":[{"id":"CVE-2023-24534","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24534","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24534","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24534","date":"2026-10-08","epss":0.01888,"percentile":0.78902}],"urls":["https://go.dev/cl/481994","https://go.dev/issue/58975","https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8","https://pkg.go.dev/vuln/GO-2023-1704","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20230526-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-24534","description":"HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate substantially more memory than required to hold the parsed headers. An attacker can exploit this behavior to cause an HTTP server to allocate large amounts of memory from a small request, potentially leading to memory exhaustion and a denial of service. With fix, header parsing now correctly allocates only the memory required to hold parsed headers."}]},{"artifact":{"id":"6b49abc4148b87b8","cpes":["cpe:2.3:a:apache:commons-lang:2.6:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_lang:2.6:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:2.6:*:*:*:*:*:*:*"],"name":"commons-lang","purl":"pkg:maven/commons-lang/commons-lang@2.6","type":"java-archive","version":"2.6","language":"java","licenses":[],"metadata":{"pomGroupID":"commons-lang","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.407.jar:commons-lang:commons-lang","manifestName":"","pomArtifactID":"commons-lang","archiveDigests":null},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j288-q9x7-2f5v","versionConstraint":">=2.0,<=2.6 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-lang:commons-lang","version":"2.6"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-j288-q9x7-2f5v","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48924","cwe":"CWE-674","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48924","date":"2026-10-08","epss":0.02451,"percentile":0.83897}],"risk":1.409325,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-48924","https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1","https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53","https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html","http://www.openwall.com/lists/oss-security/2025/07/11/1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j288-q9x7-2f5v","description":"Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs"},"relatedVulnerabilities":[{"id":"CVE-2025-48924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48924","cwe":"CWE-674","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48924","date":"2026-10-08","epss":0.02451,"percentile":0.83897}],"urls":["https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1","http://www.openwall.com/lists/oss-security/2025/07/11/1","https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48924","description":"Uncontrolled Recursion vulnerability in Apache Commons Lang.\n\nThis issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.\n\nThe methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a \nStackOverflowError could cause an application to stop.\n\nUsers are recommended to upgrade to version 3.18.0, which fixes the issue."}]},{"artifact":{"id":"3d2c5084fd78b1a3","cpes":["cpe:2.3:a:apache:commons-lang:2.6:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_lang:2.6:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:2.6:*:*:*:*:*:*:*","cpe:2.3:a:apache:lang:2.6:*:*:*:*:*:*:*"],"name":"commons-lang","purl":"pkg:maven/commons-lang/commons-lang@2.6","type":"java-archive","version":"2.6","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"commons-lang","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-lang-2.6.jar","manifestName":"","pomArtifactID":"commons-lang","archiveDigests":[{"value":"0ce1edb914c94ebc388f086c6827e8bdeec71ac2","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-lang-2.6.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j288-q9x7-2f5v","versionConstraint":">=2.0,<=2.6 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-lang:commons-lang","version":"2.6"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-j288-q9x7-2f5v","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48924","cwe":"CWE-674","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48924","date":"2026-10-08","epss":0.02451,"percentile":0.83897}],"risk":1.409325,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-48924","https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1","https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53","https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html","http://www.openwall.com/lists/oss-security/2025/07/11/1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j288-q9x7-2f5v","description":"Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs"},"relatedVulnerabilities":[{"id":"CVE-2025-48924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48924","cwe":"CWE-674","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48924","date":"2026-10-08","epss":0.02451,"percentile":0.83897}],"urls":["https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1","http://www.openwall.com/lists/oss-security/2025/07/11/1","https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48924","description":"Uncontrolled Recursion vulnerability in Apache Commons Lang.\n\nThis issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.\n\nThe methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a \nStackOverflowError could cause an application to stop.\n\nUsers are recommended to upgrade to version 3.18.0, which fixes the issue."}]},{"artifact":{"id":"63af1d9e56a76c50","cpes":["cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:lang3:3.12.0:*:*:*:*:*:*:*"],"name":"commons-lang3","purl":"pkg:maven/org.apache.commons/commons-lang3@3.12.0","type":"java-archive","version":"3.12.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.commons","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/commons-lang3-api.hpi:WEB-INF/lib/commons-lang3-3.12.0.jar","manifestName":"","pomArtifactID":"commons-lang3","archiveDigests":[{"value":"c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/commons-lang3-api.hpi:WEB-INF/lib/commons-lang3-3.12.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.18.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j288-q9x7-2f5v","versionConstraint":">=3.0,<3.18.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.commons:commons-lang3","version":"3.12.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-j288-q9x7-2f5v","fix":{"state":"fixed","versions":["3.18.0"],"available":[{"date":"2025-07-12","kind":"first-observed","version":"3.18.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48924","cwe":"CWE-674","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48924","date":"2026-10-08","epss":0.02451,"percentile":0.83897}],"risk":1.409325,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-48924","https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1","https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53","https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html","http://www.openwall.com/lists/oss-security/2025/07/11/1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j288-q9x7-2f5v","description":"Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs"},"relatedVulnerabilities":[{"id":"CVE-2025-48924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48924","cwe":"CWE-674","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48924","date":"2026-10-08","epss":0.02451,"percentile":0.83897}],"urls":["https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1","http://www.openwall.com/lists/oss-security/2025/07/11/1","https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48924","description":"Uncontrolled Recursion vulnerability in Apache Commons Lang.\n\nThis issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.\n\nThe methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a \nStackOverflowError could cause an application to stop.\n\nUsers are recommended to upgrade to version 3.18.0, which fixes the issue."}]},{"artifact":{"id":"b8c7427183142174","cpes":["cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:lang3:3.12.0:*:*:*:*:*:*:*"],"name":"commons-lang3","purl":"pkg:maven/org.apache.commons/commons-lang3@3.12.0","type":"java-archive","version":"3.12.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.commons","virtualPath":"/usr/share/jenkins/ref/plugins/commons-lang3-api.jpi:WEB-INF/lib/commons-lang3-3.12.0.jar","manifestName":"","pomArtifactID":"commons-lang3","archiveDigests":[{"value":"c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/commons-lang3-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/commons-lang3-api.jpi:WEB-INF/lib/commons-lang3-3.12.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.18.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j288-q9x7-2f5v","versionConstraint":">=3.0,<3.18.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.commons:commons-lang3","version":"3.12.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-j288-q9x7-2f5v","fix":{"state":"fixed","versions":["3.18.0"],"available":[{"date":"2025-07-12","kind":"first-observed","version":"3.18.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48924","cwe":"CWE-674","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48924","date":"2026-10-08","epss":0.02451,"percentile":0.83897}],"risk":1.409325,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-48924","https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1","https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53","https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html","http://www.openwall.com/lists/oss-security/2025/07/11/1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j288-q9x7-2f5v","description":"Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs"},"relatedVulnerabilities":[{"id":"CVE-2025-48924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48924","cwe":"CWE-674","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48924","date":"2026-10-08","epss":0.02451,"percentile":0.83897}],"urls":["https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1","http://www.openwall.com/lists/oss-security/2025/07/11/1","https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48924","description":"Uncontrolled Recursion vulnerability in Apache Commons Lang.\n\nThis issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.\n\nThe methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a \nStackOverflowError could cause an application to stop.\n\nUsers are recommended to upgrade to version 3.18.0, which fixes the issue."}]},{"artifact":{"id":"f772bcd68950fe6d","cpes":["cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*"],"name":"commons-lang3","purl":"pkg:maven/org.apache.commons/commons-lang3@3.12.0","type":"java-archive","version":"3.12.0","language":"java","licenses":[],"metadata":{"pomGroupID":"org.apache.commons","virtualPath":"/opt/jenkins-plugin-manager.jar:org.apache.commons:commons-lang3","manifestName":"","pomArtifactID":"commons-lang3","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:28ce38a426e8c5f4d5c1503345486bf2d71355572ce12a34d66ff30128719565","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.18.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j288-q9x7-2f5v","versionConstraint":">=3.0,<3.18.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.commons:commons-lang3","version":"3.12.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-j288-q9x7-2f5v","fix":{"state":"fixed","versions":["3.18.0"],"available":[{"date":"2025-07-12","kind":"first-observed","version":"3.18.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48924","cwe":"CWE-674","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48924","date":"2026-10-08","epss":0.02451,"percentile":0.83897}],"risk":1.409325,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-48924","https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1","https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53","https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html","http://www.openwall.com/lists/oss-security/2025/07/11/1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j288-q9x7-2f5v","description":"Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs"},"relatedVulnerabilities":[{"id":"CVE-2025-48924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48924","cwe":"CWE-674","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48924","date":"2026-10-08","epss":0.02451,"percentile":0.83897}],"urls":["https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1","http://www.openwall.com/lists/oss-security/2025/07/11/1","https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48924","description":"Uncontrolled Recursion vulnerability in Apache Commons Lang.\n\nThis issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.\n\nThe methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a \nStackOverflowError could cause an application to stop.\n\nUsers are recommended to upgrade to version 3.18.0, which fixes the issue."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-42916","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-42916","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42916","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42916","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42916","date":"2026-10-08","epss":0.01846,"percentile":0.78409}],"risk":1.3845,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-42916","description":"In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.). The earliest affected version is 7.77.0 2021-05-26."},"relatedVulnerabilities":[{"id":"CVE-2022-42916","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42916","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42916","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42916","date":"2026-10-08","epss":0.01846,"percentile":0.78409}],"urls":["http://seclists.org/fulldisclosure/2023/Jan/19","http://seclists.org/fulldisclosure/2023/Jan/20","http://www.openwall.com/lists/oss-security/2022/12/21/1","https://curl.se/docs/CVE-2022-42916.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/37YEVVC6NAF6H7UHH6YAUY5QEVY6LIH2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVU3IMZCKR4VE6KJ4GCWRL2ILLC6OV76/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q27V5YYMXUVI6PRZQVECON32XPVWTKDK/","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20221209-0010/","https://support.apple.com/kb/HT213604","https://support.apple.com/kb/HT213605"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-42916","description":"In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.). The earliest affected version is 7.77.0 2021-05-26."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-42916","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-42916","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42916","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42916","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42916","date":"2026-10-08","epss":0.01846,"percentile":0.78409}],"risk":1.3845,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-42916","description":"In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.). The earliest affected version is 7.77.0 2021-05-26."},"relatedVulnerabilities":[{"id":"CVE-2022-42916","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42916","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42916","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42916","date":"2026-10-08","epss":0.01846,"percentile":0.78409}],"urls":["http://seclists.org/fulldisclosure/2023/Jan/19","http://seclists.org/fulldisclosure/2023/Jan/20","http://www.openwall.com/lists/oss-security/2022/12/21/1","https://curl.se/docs/CVE-2022-42916.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/37YEVVC6NAF6H7UHH6YAUY5QEVY6LIH2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVU3IMZCKR4VE6KJ4GCWRL2ILLC6OV76/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q27V5YYMXUVI6PRZQVECON32XPVWTKDK/","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20221209-0010/","https://support.apple.com/kb/HT213604","https://support.apple.com/kb/HT213605"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-42916","description":"In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.). The earliest affected version is 7.77.0 2021-05-26."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-42916","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-42916","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42916","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42916","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42916","date":"2026-10-08","epss":0.01846,"percentile":0.78409}],"risk":1.3845,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-42916","description":"In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.). The earliest affected version is 7.77.0 2021-05-26."},"relatedVulnerabilities":[{"id":"CVE-2022-42916","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42916","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42916","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42916","date":"2026-10-08","epss":0.01846,"percentile":0.78409}],"urls":["http://seclists.org/fulldisclosure/2023/Jan/19","http://seclists.org/fulldisclosure/2023/Jan/20","http://www.openwall.com/lists/oss-security/2022/12/21/1","https://curl.se/docs/CVE-2022-42916.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/37YEVVC6NAF6H7UHH6YAUY5QEVY6LIH2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVU3IMZCKR4VE6KJ4GCWRL2ILLC6OV76/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q27V5YYMXUVI6PRZQVECON32XPVWTKDK/","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20221209-0010/","https://support.apple.com/kb/HT213604","https://support.apple.com/kb/HT213605"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-42916","description":"In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.). The earliest affected version is 7.77.0 2021-05-26."}]},{"artifact":{"id":"a06dc8850c1b1b35","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.10-2\\+deb11u5:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.7&upstream=expat","type":"deb","version":"2.2.10-2+deb11u5","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.2.10-2+deb11u6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-52425","versionConstraint":"< 2.2.10-2+deb11u6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"expat","version":"2.2.10-2+deb11u5"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-52425","fix":{"state":"fixed","versions":["2.2.10-2+deb11u6"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"2.2.10-2+deb11u6"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-52425","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-52425","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-52425","date":"2026-10-08","epss":0.01815,"percentile":0.7802}],"risk":1.36125,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-52425","description":"libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed."},"relatedVulnerabilities":[{"id":"CVE-2023-52425","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-52425","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-52425","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-52425","date":"2026-10-08","epss":0.01815,"percentile":0.7802}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/20/5","https://github.com/libexpat/libexpat/pull/789","https://lists.debian.org/debian-lts-announce/2024/04/msg00006.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNUBSGZFEZOBHJFTAD42SAN4ATW2VEMV/","https://security.netapp.com/advisory/ntap-20240614-0003/","https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-52425","description":"libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.20"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-25193","versionConstraint":">= 12, < 17.0.8||>= 18, < 20.0.2||>= 9, < 11.0.20 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-25193","fix":{"state":"fixed","versions":["11.0.20","17.0.8","20.0.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"17.0.8"},{"date":"2025-09-04","kind":"first-observed","version":"20.0.2"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.20"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-25193","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-25193","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-25193","date":"2026-10-08","epss":0.01812,"percentile":0.77984}],"risk":1.3590000000000002,"urls":["https://chromium.googlesource.com/chromium/src/+/e1f324aa681af54101c1f2d173d92adb80e37088/DEPS#361","https://github.com/harfbuzz/harfbuzz/blob/2822b589bc837fae6f66233e2cf2eef0f6ce8470/src/hb-ot-layout-gsubgpos.hh","https://github.com/harfbuzz/harfbuzz/commit/85be877925ddbf34f74a1229f3ca1716bb6170dc","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWCHWSICWVZSAXP2YAXM65JC2GR53547/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZ5M2GSAIHFPLHYJXUPQ2QDJCLWXUGO3/","https://security.netapp.com/advisory/ntap-20230725-0006/","https://openjdk.org/groups/vulnerability/advisories/2023-07-18","https://www.oracle.com/security-alerts/cpujul2023.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-25193","description":"hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks."},"relatedVulnerabilities":[]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4517","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4517","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4517","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":9.4,"impactScore":5.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4517","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-4517","date":"2026-10-08","epss":0.0143,"percentile":0.72229}],"risk":1.3156,"urls":["https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f","https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"Critical","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4517","description":"Allows arbitrary filesystem writes outside the extraction directory during extraction with filter=\"data\".\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links."},"relatedVulnerabilities":[]},{"artifact":{"id":"a06dc8850c1b1b35","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.10-2\\+deb11u5:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.7&upstream=expat","type":"deb","version":"2.2.10-2+deb11u5","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.2.10-2+deb11u6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-45492","versionConstraint":"< 2.2.10-2+deb11u6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"expat","version":"2.2.10-2+deb11u5"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-45492","fix":{"state":"fixed","versions":["2.2.10-2+deb11u6"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"2.2.10-2+deb11u6"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-45492","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-45492","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-45492","date":"2026-10-08","epss":0.01393,"percentile":0.71532}],"risk":1.30942,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-45492","description":"An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX)."},"relatedVulnerabilities":[{"id":"CVE-2024-45492","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-45492","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-45492","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-45492","date":"2026-10-08","epss":0.01393,"percentile":0.71532}],"urls":["https://github.com/libexpat/libexpat/issues/889","https://github.com/libexpat/libexpat/pull/892","https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html","https://security.netapp.com/advisory/ntap-20241018-0005/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-45492","description":"An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX)."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-27043","versionConstraint":"< 3.8.20||>= 3.10.0a0, < 3.10.15||>= 3.11.0a0, < 3.11.10||>= 3.12.0a0, < 3.12.6||>= 3.13.0a0, < 3.13.0a1||>= 3.9.0a0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-27043","versionConstraint":"< 3.8.20||>= 3.10.0a0, < 3.10.15||>= 3.11.0a0, < 3.11.10||>= 3.12.0a0, < 3.12.6||>= 3.13.0a0, < 3.13.0a1||>= 3.9.0a0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-27043","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.6","3.13.0a1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0a1"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0a1"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27043","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-27043","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2023-27043","cwe":"CWE-1286","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-27043","date":"2026-10-08","epss":0.02527,"percentile":0.84422}],"risk":1.3014050000000001,"urls":["http://python.org","https://github.com/python/cpython/issues/102988","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/","https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html","https://security.netapp.com/advisory/ntap-20230601-0003/","http://seclists.org/fulldisclosure/2025/Apr/8","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27043","description":"The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python."},"relatedVulnerabilities":[]},{"artifact":{"id":"a06dc8850c1b1b35","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.10-2\\+deb11u5:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.7&upstream=expat","type":"deb","version":"2.2.10-2+deb11u5","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.2.10-2+deb11u6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-45490","versionConstraint":"< 2.2.10-2+deb11u6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"expat","version":"2.2.10-2+deb11u5"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-45490","fix":{"state":"fixed","versions":["2.2.10-2+deb11u6"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"2.2.10-2+deb11u6"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-45490","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-45490","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-45490","date":"2026-10-08","epss":0.01686,"percentile":0.76321}],"risk":1.2645,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-45490","description":"An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer."},"relatedVulnerabilities":[{"id":"CVE-2024-45490","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-45490","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-45490","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-45490","date":"2026-10-08","epss":0.01686,"percentile":0.76321}],"urls":["https://github.com/libexpat/libexpat/issues/887","https://github.com/libexpat/libexpat/pull/890","http://seclists.org/fulldisclosure/2024/Dec/10","http://seclists.org/fulldisclosure/2024/Dec/12","http://seclists.org/fulldisclosure/2024/Dec/6","http://seclists.org/fulldisclosure/2024/Dec/7","http://seclists.org/fulldisclosure/2024/Dec/8","https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html","https://security.netapp.com/advisory/ntap-20241018-0004/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-45490","description":"An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1568","versionConstraint":"<1.19.6||>=1.20.0-0,<1.20.1 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1568","fix":{"state":"fixed","versions":["1.19.6","1.20.1"],"available":[{"date":"2023-02-14","kind":"release","version":"1.19.6"},{"date":"2023-02-14","kind":"release","version":"1.20.1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41722","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41722","date":"2026-10-08","epss":0.01678,"percentile":0.76195}],"risk":1.2585,"urls":["https://go.dev/cl/468123","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/57274","description":"A path traversal vulnerability exists in filepath.Clean on Windows.\n\nOn Windows, the filepath.Clean function could transform an invalid path such as \"a/../c:/b\" into the valid path \"c:\\b\". This transformation of a relative (if invalid) path into an absolute path could enable a directory traversal attack.\n\nAfter fix, the filepath.Clean function transforms this path into the relative (but still invalid) path \".\\c:\\b\"."},"relatedVulnerabilities":[{"id":"CVE-2022-41722","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41722","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41722","date":"2026-10-08","epss":0.01678,"percentile":0.76195}],"urls":["https://go.dev/cl/468123","https://go.dev/issue/57274","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E","https://pkg.go.dev/vuln/GO-2023-1568"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41722","description":"A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as \"a/../c:/b\" into the valid path \"c:\\b\". This transformation of a relative (if invalid) path into an absolute path could enable a directory traversal attack. After fix, the filepath.Clean function transforms this path into the relative (but still invalid) path \".\\c:\\b\"."}]},{"artifact":{"id":"29f75eac1d5f2b35","cpes":["cpe:2.3:a:org.codehaus.jettison.jettison:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:org.codehaus.jettison:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:org.codehaus:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:codehaus:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:jettison:jettison:1.3.7:*:*:*:*:*:*:*"],"name":"jettison","purl":"pkg:maven/org.codehaus.jettison/jettison@1.3.7","type":"java-archive","version":"1.3.7","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"org.codehaus.jettison","virtualPath":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi:WEB-INF/lib/jettison-1.3.7.jar","manifestName":"","pomArtifactID":"jettison","archiveDigests":[{"value":"7d36a59a0577f11b12088b9e215d6860345b9e1d","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi:WEB-INF/lib/jettison-1.3.7.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.5.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-x27m-9w8j-5vcw","versionConstraint":"<1.5.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.codehaus.jettison:jettison","version":"1.3.7"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-x27m-9w8j-5vcw","fix":{"state":"fixed","versions":["1.5.2"],"available":[{"date":"2023-01-03","kind":"first-observed","version":"1.5.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40150","cwe":"CWE-400","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-40150","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-40150","date":"2026-10-08","epss":0.01647,"percentile":0.7575}],"risk":1.23525,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-40150","https://github.com/jettison-json/jettison/issues/45","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46549","https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html","https://www.debian.org/security/2023/dsa-5312"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-x27m-9w8j-5vcw","description":"Jettison memory exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2022-40150","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40150","cwe":"CWE-400","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-40150","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-40150","date":"2026-10-08","epss":0.01647,"percentile":0.7575}],"urls":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46549","https://github.com/jettison-json/jettison/issues/45","https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html","https://www.debian.org/security/2023/dsa-5312"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-40150","description":"Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may support a denial of service attack."}]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-0553","versionConstraint":"< 3.7.1-5+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-0553","fix":{"state":"fixed","versions":["3.7.1-5+deb11u5"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"3.7.1-5+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0553","cwe":"CWE-203","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2024-0553","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-0553","date":"2026-10-08","epss":0.01614,"percentile":0.75252}],"risk":1.2105000000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-0553","description":"A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981."},"relatedVulnerabilities":[{"id":"CVE-2024-0553","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0553","cwe":"CWE-203","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2024-0553","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-0553","date":"2026-10-08","epss":0.01614,"percentile":0.75252}],"urls":["https://access.redhat.com/errata/RHSA-2024:0533","https://access.redhat.com/errata/RHSA-2024:0627","https://access.redhat.com/errata/RHSA-2024:0796","https://access.redhat.com/errata/RHSA-2024:1082","https://access.redhat.com/errata/RHSA-2024:1108","https://access.redhat.com/errata/RHSA-2024:1383","https://access.redhat.com/errata/RHSA-2024:2094","https://access.redhat.com/security/cve/CVE-2024-0553","https://bugzilla.redhat.com/show_bug.cgi?id=2258412","https://gitlab.com/gnutls/gnutls/-/issues/1522","https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html","http://www.openwall.com/lists/oss-security/2024/01/19/3","https://lists.debian.org/debian-lts-announce/2024/02/msg00010.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/","https://security.netapp.com/advisory/ntap-20240202-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0553","description":"A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981."}]},{"artifact":{"id":"2a88897c46c4751f","cpes":["cpe:2.3:a:libperl5.32:libperl5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"libperl5.32","purl":"pkg:deb/debian/libperl5.32@5.32.1-4%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=perl","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libperl5.32/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libperl5.32/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libperl5.32:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libperl5.32:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.32.1-4+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-31484","versionConstraint":"< 5.32.1-4+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-31484","fix":{"state":"fixed","versions":["5.32.1-4+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"5.32.1-4+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-31484","date":"2026-10-08","epss":0.01548,"percentile":0.7429}],"risk":1.20744,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-31484","description":"CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS."},"relatedVulnerabilities":[{"id":"CVE-2023-31484","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-31484","date":"2026-10-08","epss":0.01548,"percentile":0.7429}],"urls":["http://www.openwall.com/lists/oss-security/2023/04/29/1","http://www.openwall.com/lists/oss-security/2023/05/03/3","http://www.openwall.com/lists/oss-security/2023/05/03/5","http://www.openwall.com/lists/oss-security/2023/05/07/2","https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/","https://github.com/andk/cpanpm/pull/175","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/","https://metacpan.org/dist/CPAN/changes","https://security.netapp.com/advisory/ntap-20240621-0007/","https://www.openwall.com/lists/oss-security/2023/04/18/14","https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-31484","description":"CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS."}]},{"artifact":{"id":"ca766af4b1156087","cpes":["cpe:2.3:a:perl:perl:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"perl","purl":"pkg:deb/debian/perl@5.32.1-4%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/perl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.list"},{"path":"/var/lib/dpkg/info/perl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.postinst"},{"path":"/var/lib/dpkg/info/perl.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.postrm"},{"path":"/var/lib/dpkg/info/perl.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.preinst"},{"path":"/var/lib/dpkg/info/perl.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"5.32.1-4+deb11u4"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-31484","versionConstraint":"< 5.32.1-4+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-31484","fix":{"state":"fixed","versions":["5.32.1-4+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"5.32.1-4+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-31484","date":"2026-10-08","epss":0.01548,"percentile":0.7429}],"risk":1.20744,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-31484","description":"CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS."},"relatedVulnerabilities":[{"id":"CVE-2023-31484","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-31484","date":"2026-10-08","epss":0.01548,"percentile":0.7429}],"urls":["http://www.openwall.com/lists/oss-security/2023/04/29/1","http://www.openwall.com/lists/oss-security/2023/05/03/3","http://www.openwall.com/lists/oss-security/2023/05/03/5","http://www.openwall.com/lists/oss-security/2023/05/07/2","https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/","https://github.com/andk/cpanpm/pull/175","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/","https://metacpan.org/dist/CPAN/changes","https://security.netapp.com/advisory/ntap-20240621-0007/","https://www.openwall.com/lists/oss-security/2023/04/18/14","https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-31484","description":"CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS."}]},{"artifact":{"id":"0132d68bd1bdb220","cpes":["cpe:2.3:a:perl-base:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=perl","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.32.1-4+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-31484","versionConstraint":"< 5.32.1-4+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-31484","fix":{"state":"fixed","versions":["5.32.1-4+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"5.32.1-4+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-31484","date":"2026-10-08","epss":0.01548,"percentile":0.7429}],"risk":1.20744,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-31484","description":"CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS."},"relatedVulnerabilities":[{"id":"CVE-2023-31484","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-31484","date":"2026-10-08","epss":0.01548,"percentile":0.7429}],"urls":["http://www.openwall.com/lists/oss-security/2023/04/29/1","http://www.openwall.com/lists/oss-security/2023/05/03/3","http://www.openwall.com/lists/oss-security/2023/05/03/5","http://www.openwall.com/lists/oss-security/2023/05/07/2","https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/","https://github.com/andk/cpanpm/pull/175","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/","https://metacpan.org/dist/CPAN/changes","https://security.netapp.com/advisory/ntap-20240621-0007/","https://www.openwall.com/lists/oss-security/2023/04/18/14","https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-31484","description":"CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS."}]},{"artifact":{"id":"0e78a1cc7a598ddd","cpes":["cpe:2.3:a:perl-modules-5.32:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-modules-5.32:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules_5.32:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules_5.32:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-modules:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-modules:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"perl-modules-5.32","purl":"pkg:deb/debian/perl-modules-5.32@5.32.1-4%2Bdeb11u2?arch=all&distro=debian-11.7&upstream=perl","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-modules-5.32/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/perl-modules-5.32/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-modules-5.32.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl-modules-5.32.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-modules-5.32.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl-modules-5.32.list"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.32.1-4+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-31484","versionConstraint":"< 5.32.1-4+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-31484","fix":{"state":"fixed","versions":["5.32.1-4+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"5.32.1-4+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-31484","date":"2026-10-08","epss":0.01548,"percentile":0.7429}],"risk":1.20744,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-31484","description":"CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS."},"relatedVulnerabilities":[{"id":"CVE-2023-31484","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-31484","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-31484","date":"2026-10-08","epss":0.01548,"percentile":0.7429}],"urls":["http://www.openwall.com/lists/oss-security/2023/04/29/1","http://www.openwall.com/lists/oss-security/2023/05/03/3","http://www.openwall.com/lists/oss-security/2023/05/03/5","http://www.openwall.com/lists/oss-security/2023/05/07/2","https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/","https://github.com/andk/cpanpm/pull/175","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/","https://metacpan.org/dist/CPAN/changes","https://security.netapp.com/advisory/ntap-20240621-0007/","https://www.openwall.com/lists/oss-security/2023/04/18/14","https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-31484","description":"CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63076","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-63076","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63076","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63076","date":"2026-10-08","epss":0.01602,"percentile":0.75073}],"risk":1.2015,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-63076","description":"Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid pointer.  Impact summary: A remote, unauthenticated attacker can crash an application acting as a CMP server that accepts PBM-protected messages, or a CMP client talking to a malicious or intercepted CMP server, resulting in a Denial of Service.  CWE: CWE-476: NULL Pointer Dereference  Description: When verifying the password-based MAC protection of a CMP message, OpenSSL library reads the protectionAlg algorithm parameter with X509_ALGOR_get0(), which returns both the parameter type and its value pointer. The value is then cast to an ASN1_STRING and treated as the expected PBMParameter after only checking that pointer is not NULL. The parameter type returned by X509_ALGOR_get0() was never consulted.  This happens during protection verification, before any MAC is computed, so no knowledge of the PBM shared secret is required; the only precondition is that PBM verification is reachable. On the server side this is reached from OSSL_CMP_SRV_process_request() for any application that stands up a CMP server accepting PBM-protected messages, and on the client side from CMP response validation against a malicious or on-path (MITM) server. The reliable consequence is a denial of service; there is no memory disclosure, no controlled memory write, and no path to code execution. CMP is a specialized feature that an application must explicitly enable.  FIPS impact: no As the CMP code lives outside the FIPS module boundary, no FIPS modules are affected by this CVE."},"relatedVulnerabilities":[{"id":"CVE-2026-63076","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63076","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63076","date":"2026-10-08","epss":0.01602,"percentile":0.75073}],"urls":["https://github.com/openssl/openssl/commit/37882aa2e0256e1072442a8f62f7db45b995c45b","https://github.com/openssl/openssl/commit/a17cc8d612ecff6d94a9b7ca8b5283ddf5ff570e","https://github.com/openssl/openssl/commit/a1f348ccb328c3afbd4ba6883f9b7c813c043259","https://github.com/openssl/openssl/commit/a7af46a92d0ce19a90e669ef56d2576a07924226","https://github.com/openssl/openssl/commit/cdacfff557389abfa9e4615abded2ec984517d6c","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63076","description":"Issue summary: OpenSSL CMP password based protection verification only\nchecks whether the protectionAlg parameter was not NULL and not its\nASN.1 type, before treating it as a PBMParameter. A crafted message can\ncontain a parameter of a different type, which is then dereferenced as an\ninvalid pointer.\n\nImpact summary: A remote, unauthenticated attacker can crash an application\nacting as a CMP server that accepts PBM-protected messages, or a CMP client\ntalking to a malicious or intercepted CMP server, resulting in a Denial of\nService.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: When verifying the password-based MAC protection of a CMP\nmessage, OpenSSL library reads the protectionAlg algorithm parameter with\nX509_ALGOR_get0(), which returns both the parameter type and its value\npointer. The value is then cast to an ASN1_STRING and treated as the\nexpected PBMParameter after only checking that pointer is not NULL. The\nparameter type returned by X509_ALGOR_get0() was never consulted.\n\nThis happens during protection verification, before any MAC is computed, so\nno knowledge of the PBM shared secret is required; the only precondition is\nthat PBM verification is reachable. On the server side this is reached from\nOSSL_CMP_SRV_process_request() for any application that stands up a CMP\nserver accepting PBM-protected messages, and on the client side from CMP\nresponse validation against a malicious or on-path (MITM) server. The\nreliable consequence is a denial of service; there is no memory disclosure,\nno controlled memory write, and no path to code execution. CMP is a\nspecialized feature that an application must explicitly enable.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-63076","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-63076","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63076","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63076","date":"2026-10-08","epss":0.01602,"percentile":0.75073}],"risk":1.2015,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-63076","description":"Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid pointer.  Impact summary: A remote, unauthenticated attacker can crash an application acting as a CMP server that accepts PBM-protected messages, or a CMP client talking to a malicious or intercepted CMP server, resulting in a Denial of Service.  CWE: CWE-476: NULL Pointer Dereference  Description: When verifying the password-based MAC protection of a CMP message, OpenSSL library reads the protectionAlg algorithm parameter with X509_ALGOR_get0(), which returns both the parameter type and its value pointer. The value is then cast to an ASN1_STRING and treated as the expected PBMParameter after only checking that pointer is not NULL. The parameter type returned by X509_ALGOR_get0() was never consulted.  This happens during protection verification, before any MAC is computed, so no knowledge of the PBM shared secret is required; the only precondition is that PBM verification is reachable. On the server side this is reached from OSSL_CMP_SRV_process_request() for any application that stands up a CMP server accepting PBM-protected messages, and on the client side from CMP response validation against a malicious or on-path (MITM) server. The reliable consequence is a denial of service; there is no memory disclosure, no controlled memory write, and no path to code execution. CMP is a specialized feature that an application must explicitly enable.  FIPS impact: no As the CMP code lives outside the FIPS module boundary, no FIPS modules are affected by this CVE."},"relatedVulnerabilities":[{"id":"CVE-2026-63076","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63076","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63076","date":"2026-10-08","epss":0.01602,"percentile":0.75073}],"urls":["https://github.com/openssl/openssl/commit/37882aa2e0256e1072442a8f62f7db45b995c45b","https://github.com/openssl/openssl/commit/a17cc8d612ecff6d94a9b7ca8b5283ddf5ff570e","https://github.com/openssl/openssl/commit/a1f348ccb328c3afbd4ba6883f9b7c813c043259","https://github.com/openssl/openssl/commit/a7af46a92d0ce19a90e669ef56d2576a07924226","https://github.com/openssl/openssl/commit/cdacfff557389abfa9e4615abded2ec984517d6c","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63076","description":"Issue summary: OpenSSL CMP password based protection verification only\nchecks whether the protectionAlg parameter was not NULL and not its\nASN.1 type, before treating it as a PBMParameter. A crafted message can\ncontain a parameter of a different type, which is then dereferenced as an\ninvalid pointer.\n\nImpact summary: A remote, unauthenticated attacker can crash an application\nacting as a CMP server that accepts PBM-protected messages, or a CMP client\ntalking to a malicious or intercepted CMP server, resulting in a Denial of\nService.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: When verifying the password-based MAC protection of a CMP\nmessage, OpenSSL library reads the protectionAlg algorithm parameter with\nX509_ALGOR_get0(), which returns both the parameter type and its value\npointer. The value is then cast to an ASN1_STRING and treated as the\nexpected PBMParameter after only checking that pointer is not NULL. The\nparameter type returned by X509_ALGOR_get0() was never consulted.\n\nThis happens during protection verification, before any MAC is computed, so\nno knowledge of the PBM shared secret is required; the only precondition is\nthat PBM verification is reachable. On the server side this is reached from\nOSSL_CMP_SRV_process_request() for any application that stands up a CMP\nserver accepting PBM-protected messages, and on the client side from CMP\nresponse validation against a malicious or on-path (MITM) server. The\nreliable consequence is a denial of service; there is no memory disclosure,\nno controlled memory write, and no path to code execution. CMP is a\nspecialized feature that an application must explicitly enable.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."}]},{"artifact":{"id":"d633cd24e9d2cb32","cpes":["cpe:2.3:a:libzstd1:libzstd1:1.4.8\\+dfsg-2.1:*:*:*:*:*:*:*"],"name":"libzstd1","purl":"pkg:deb/debian/libzstd1@1.4.8%2Bdfsg-2.1?arch=amd64&distro=debian-11.7&upstream=libzstd","type":"deb","version":"1.4.8+dfsg-2.1","language":"","licenses":["BSD-3-clause","Expat","GPL-2","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libzstd1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libzstd1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libzstd1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libzstd1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libzstd"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-4899","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"libzstd","version":"1.4.8+dfsg-2.1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-4899","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-4899","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-4899","cwe":"CWE-400","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-4899","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-4899","date":"2026-10-08","epss":0.01588,"percentile":0.7488}],"risk":1.1909999999999998,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-4899","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun."},"relatedVulnerabilities":[{"id":"CVE-2022-4899","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-4899","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-4899","cwe":"CWE-400","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-4899","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-4899","date":"2026-10-08","epss":0.01588,"percentile":0.7488}],"urls":["https://github.com/facebook/zstd/issues/3200","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/","https://security.netapp.com/advisory/ntap-20230725-0005/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-4899","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-36632","versionConstraint":"<= 3.11.4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-36632","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-36632","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-36632","date":"2026-10-08","epss":0.01584,"percentile":0.74824}],"risk":1.188,"urls":["https://docs.python.org/3/library/email.html","https://docs.python.org/3/library/email.utils.html","https://github.com/Daybreak2019/PoC_python3.9_Vul/blob/main/RecursionError-email.utils.parseaddr.py","https://github.com/python/cpython/issues/103800"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-36632","description":"The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger \"RecursionError: maximum recursion depth exceeded while calling a Python object\" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed to contain a name and an e-mail address. NOTE: email.utils.parseaddr is categorized as a Legacy API in the documentation of the Python email package. Applications should instead use the email.parser.BytesParser or email.parser.Parser class. NOTE: the vendor's perspective is that this is neither a vulnerability nor a bug. The email package is intended to have size limits and to throw an exception when limits are exceeded; they were exceeded by the example demonstration code."},"relatedVulnerabilities":[]},{"artifact":{"id":"5c96a37df25ae27a","cpes":["cpe:2.3:a:com.google.oauth-client:google-oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.oauth-client:google_oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth-client:google-oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth-client:google_oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth_client:google-oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth_client:google_oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.oauth-client:oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.oauth-client:oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth-client:oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth-client:oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth:google-oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth:google_oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth:google-oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth:google_oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth_client:oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth_client:oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth-client:google-oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth-client:google_oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth_client:google-oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth_client:google_oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google:google-oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google:google_oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth:oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth:oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth:oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth:oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth-client:oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth-client:oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth:google-oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth:google_oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth_client:oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth_client:oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google:oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:google:oauth_client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth:oauth-client:1.20.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth:oauth_client:1.20.0:*:*:*:*:*:*:*"],"name":"google-oauth-client","purl":"pkg:maven/com.google.oauth-client/google-oauth-client@1.20.0","type":"java-archive","version":"1.20.0","language":"java","licenses":[],"metadata":{"pomGroupID":"com.google.oauth-client","virtualPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/google-oauth-client-1.20.0.jar","manifestName":"","pomArtifactID":"google-oauth-client","archiveDigests":[{"value":"1d086ac5756475ddf451af2e2df6e288d18608ca","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/google-login.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/google-oauth-client-1.20.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.31.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-f263-c949-w85g","versionConstraint":"<1.31.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.google.oauth-client:google-oauth-client","version":"1.20.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-f263-c949-w85g","fix":{"state":"fixed","versions":["1.31.0"],"available":[{"date":"2021-09-29","kind":"first-observed","version":"1.31.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7692","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7692","date":"2026-10-08","epss":0.01587,"percentile":0.7486}],"risk":1.182315,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2020-7692","https://github.com/googleapis/google-oauth-java-client/issues/469","https://github.com/googleapis/google-oauth-java-client/commit/13433cd7dd06267fc261f0b1d4764f8e3432c824","https://lists.apache.org/thread.html/r3db6ac73e0558d64f0b664f2fa4ef0a865e57c5de20f8321d3b48678@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/reae8909b264d1103f321b9ce1623c10c1ddc77dba9790247f2c0c90f@%3Ccommits.druid.apache.org%3E","https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-575276","https://tools.ietf.org/html/rfc7636%23section-1","https://tools.ietf.org/html/rfc8252%23section-8.1"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-f263-c949-w85g","description":"Improper Authorization in Google OAuth Client"},"relatedVulnerabilities":[{"id":"CVE-2020-7692","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"report@snyk.io","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7692","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7692","date":"2026-10-08","epss":0.01587,"percentile":0.7486}],"urls":["https://github.com/googleapis/google-oauth-java-client/commit/13433cd7dd06267fc261f0b1d4764f8e3432c824","https://github.com/googleapis/google-oauth-java-client/issues/469","https://lists.apache.org/thread.html/r3db6ac73e0558d64f0b664f2fa4ef0a865e57c5de20f8321d3b48678%40%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/reae8909b264d1103f321b9ce1623c10c1ddc77dba9790247f2c0c90f%40%3Ccommits.druid.apache.org%3E","https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-575276","https://tools.ietf.org/html/rfc7636%23section-1","https://tools.ietf.org/html/rfc8252%23section-8.1"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7692","description":"PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code returned by an authorization server is not enough to guarantee that the client that issued the initial authorization request is the one that will be authorized. An attacker is able to obtain the authorization code using a malicious app on the client-side and use it to gain authorization to the protected resource. This affects the package com.google.oauth-client:google-oauth-client before 1.31.0."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-13836","versionConstraint":"< 3.10.20||>= 3.11.0a1, < 3.11.15||>= 3.12.0a1, < 3.12.13||>= 3.13.0a1, < 3.13.11||>= 3.14.0a1, < 3.14.1||>= 3.15.0a1, < 3.15.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.15"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-13836","versionConstraint":"< 3.10.20||>= 3.11.0a1, < 3.11.15||>= 3.12.0a1, < 3.12.13||>= 3.13.0a1, < 3.13.11||>= 3.14.0a1, < 3.14.1||>= 3.15.0a1, < 3.15.0a3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-13836","fix":{"state":"fixed","versions":["3.10.20","3.11.15","3.12.13","3.13.11","3.14.1","3.15.0a3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a3"},{"date":"2026-05-07","kind":"first-observed","version":"3.10.20"},{"date":"2026-05-07","kind":"first-observed","version":"3.11.15"},{"date":"2026-05-07","kind":"first-observed","version":"3.12.13"},{"date":"2025-12-10","kind":"first-observed","version":"3.13.11"},{"date":"2025-12-04","kind":"first-observed","version":"3.14.1"},{"date":"2026-04-15","kind":"first-observed","version":"3.15.0a3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13836","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13836","date":"2026-10-08","epss":0.01631,"percentile":0.75501}],"risk":1.17432,"urls":["https://github.com/python/cpython/commit/14b1fdb0a94b96f86fc7b86671ea9582b8676628","https://github.com/python/cpython/commit/289f29b0fe38baf2d7cb5854f4bb573cc34a6a15","https://github.com/python/cpython/commit/4ce27904b597c77d74dd93f2c912676021a99155","https://github.com/python/cpython/commit/5a4c4a033a4a54481be6870aa1896fad732555b5","https://github.com/python/cpython/commit/5dc101675fd22918facbbe0fecdc821502beaaf0","https://github.com/python/cpython/commit/afc40bdd3dd71f343fd9016f6d8eebbacbd6587c","https://github.com/python/cpython/issues/119451","https://github.com/python/cpython/pull/119454","https://mail.python.org/archives/list/security-announce@python.org/thread/OQ6G7MKRQIS3OAREC3HNG3D2DPOU34XO/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-13836","description":"When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS."},"relatedVulnerabilities":[]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-9230","versionConstraint":"< 1.1.1w-0+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-9230","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u4"],"available":[{"date":"2025-10-04","kind":"first-observed","version":"1.1.1w-0+deb11u4"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9230","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-9230","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9230","date":"2026-10-08","epss":0.01554,"percentile":0.74399}],"risk":1.1655,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-9230","description":"Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.  Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code.  Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy.  The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2025-9230","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9230","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-9230","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9230","date":"2026-10-08","epss":0.01554,"percentile":0.74399}],"urls":["https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45","https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280","https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def","https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd","https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482","https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3","https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba","https://openssl-library.org/news/secadv/20250930.txt","http://www.openwall.com/lists/oss-security/2025/09/30/5","https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-089022.html","https://cert-portal.siemens.com/productcert/html/ssa-253495.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-485750.html","https://cert-portal.siemens.com/productcert/html/ssa-585531.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9230","description":"Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u4"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-9230","versionConstraint":"< 1.1.1w-0+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-9230","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u4"],"available":[{"date":"2025-10-04","kind":"first-observed","version":"1.1.1w-0+deb11u4"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9230","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-9230","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9230","date":"2026-10-08","epss":0.01554,"percentile":0.74399}],"risk":1.1655,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-9230","description":"Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.  Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code.  Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy.  The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2025-9230","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9230","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-9230","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9230","date":"2026-10-08","epss":0.01554,"percentile":0.74399}],"urls":["https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45","https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280","https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def","https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd","https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482","https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3","https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba","https://openssl-library.org/news/secadv/20250930.txt","http://www.openwall.com/lists/oss-security/2025/09/30/5","https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-089022.html","https://cert-portal.siemens.com/productcert/html/ssa-253495.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-485750.html","https://cert-portal.siemens.com/productcert/html/ssa-585531.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9230","description":"Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-9681","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-9681","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9681","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-9681","date":"2026-10-08","epss":0.01987,"percentile":0.79983}],"risk":1.1425249999999998,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-9681","description":"When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended.  This affects curl using applications that enable HSTS and use URLs with the insecure `HTTP://` scheme and perform transfers with hosts like `x.example.com` as well as `example.com` where the first host is a subdomain of the second host.  (The HSTS cache either needs to have been populated manually or there needs to have been previous HTTPS accesses done as the cache needs to have entries for the domains involved to trigger this problem.)  When `x.example.com` responds with `Strict-Transport-Security:` headers, this bug can make the subdomain's expiry timeout *bleed over* and get set for the parent domain `example.com` in curl's HSTS cache.  The result of a triggered bug is that HTTP accesses to `example.com` get converted to HTTPS for a different period of time than what was asked for by the origin server. If `example.com` for example stops supporting HTTPS at its expiry time, curl might then fail to access `http://example.com` until the (wrongly set) timeout expires. This bug can also expire the parent's entry *earlier*, thus making curl inadvertently switch back to insecure HTTP earlier than otherwise intended."},"relatedVulnerabilities":[{"id":"CVE-2024-9681","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9681","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-9681","date":"2026-10-08","epss":0.01987,"percentile":0.79983}],"urls":["https://curl.se/docs/CVE-2024-9681.html","https://curl.se/docs/CVE-2024-9681.json","https://hackerone.com/reports/2764830","http://seclists.org/fulldisclosure/2025/Apr/10","http://seclists.org/fulldisclosure/2025/Apr/11","http://seclists.org/fulldisclosure/2025/Apr/12","http://seclists.org/fulldisclosure/2025/Apr/13","http://seclists.org/fulldisclosure/2025/Apr/4","http://seclists.org/fulldisclosure/2025/Apr/5","http://seclists.org/fulldisclosure/2025/Apr/8","http://seclists.org/fulldisclosure/2025/Apr/9","http://www.openwall.com/lists/oss-security/2024/11/06/2","https://security.netapp.com/advisory/ntap-20241213-0006/","https://github.com/curl/curl/commit/7385610d0c74c6a25","https://github.com/curl/curl/commit/a94973805df96269bf"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9681","description":"When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain's cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain's expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl's HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent's entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-9681","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-9681","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9681","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-9681","date":"2026-10-08","epss":0.01987,"percentile":0.79983}],"risk":1.1425249999999998,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-9681","description":"When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended.  This affects curl using applications that enable HSTS and use URLs with the insecure `HTTP://` scheme and perform transfers with hosts like `x.example.com` as well as `example.com` where the first host is a subdomain of the second host.  (The HSTS cache either needs to have been populated manually or there needs to have been previous HTTPS accesses done as the cache needs to have entries for the domains involved to trigger this problem.)  When `x.example.com` responds with `Strict-Transport-Security:` headers, this bug can make the subdomain's expiry timeout *bleed over* and get set for the parent domain `example.com` in curl's HSTS cache.  The result of a triggered bug is that HTTP accesses to `example.com` get converted to HTTPS for a different period of time than what was asked for by the origin server. If `example.com` for example stops supporting HTTPS at its expiry time, curl might then fail to access `http://example.com` until the (wrongly set) timeout expires. This bug can also expire the parent's entry *earlier*, thus making curl inadvertently switch back to insecure HTTP earlier than otherwise intended."},"relatedVulnerabilities":[{"id":"CVE-2024-9681","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9681","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-9681","date":"2026-10-08","epss":0.01987,"percentile":0.79983}],"urls":["https://curl.se/docs/CVE-2024-9681.html","https://curl.se/docs/CVE-2024-9681.json","https://hackerone.com/reports/2764830","http://seclists.org/fulldisclosure/2025/Apr/10","http://seclists.org/fulldisclosure/2025/Apr/11","http://seclists.org/fulldisclosure/2025/Apr/12","http://seclists.org/fulldisclosure/2025/Apr/13","http://seclists.org/fulldisclosure/2025/Apr/4","http://seclists.org/fulldisclosure/2025/Apr/5","http://seclists.org/fulldisclosure/2025/Apr/8","http://seclists.org/fulldisclosure/2025/Apr/9","http://www.openwall.com/lists/oss-security/2024/11/06/2","https://security.netapp.com/advisory/ntap-20241213-0006/","https://github.com/curl/curl/commit/7385610d0c74c6a25","https://github.com/curl/curl/commit/a94973805df96269bf"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9681","description":"When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain's cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain's expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl's HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent's entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-9681","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-9681","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9681","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-9681","date":"2026-10-08","epss":0.01987,"percentile":0.79983}],"risk":1.1425249999999998,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-9681","description":"When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended.  This affects curl using applications that enable HSTS and use URLs with the insecure `HTTP://` scheme and perform transfers with hosts like `x.example.com` as well as `example.com` where the first host is a subdomain of the second host.  (The HSTS cache either needs to have been populated manually or there needs to have been previous HTTPS accesses done as the cache needs to have entries for the domains involved to trigger this problem.)  When `x.example.com` responds with `Strict-Transport-Security:` headers, this bug can make the subdomain's expiry timeout *bleed over* and get set for the parent domain `example.com` in curl's HSTS cache.  The result of a triggered bug is that HTTP accesses to `example.com` get converted to HTTPS for a different period of time than what was asked for by the origin server. If `example.com` for example stops supporting HTTPS at its expiry time, curl might then fail to access `http://example.com` until the (wrongly set) timeout expires. This bug can also expire the parent's entry *earlier*, thus making curl inadvertently switch back to insecure HTTP earlier than otherwise intended."},"relatedVulnerabilities":[{"id":"CVE-2024-9681","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9681","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-9681","date":"2026-10-08","epss":0.01987,"percentile":0.79983}],"urls":["https://curl.se/docs/CVE-2024-9681.html","https://curl.se/docs/CVE-2024-9681.json","https://hackerone.com/reports/2764830","http://seclists.org/fulldisclosure/2025/Apr/10","http://seclists.org/fulldisclosure/2025/Apr/11","http://seclists.org/fulldisclosure/2025/Apr/12","http://seclists.org/fulldisclosure/2025/Apr/13","http://seclists.org/fulldisclosure/2025/Apr/4","http://seclists.org/fulldisclosure/2025/Apr/5","http://seclists.org/fulldisclosure/2025/Apr/8","http://seclists.org/fulldisclosure/2025/Apr/9","http://www.openwall.com/lists/oss-security/2024/11/06/2","https://security.netapp.com/advisory/ntap-20241213-0006/","https://github.com/curl/curl/commit/7385610d0c74c6a25","https://github.com/curl/curl/commit/a94973805df96269bf"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9681","description":"When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain's cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain's expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl's HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent's entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended."}]},{"artifact":{"id":"255a953ed0498414","cpes":["cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_0:3.34.1-3:*:*:*:*:*:*:*"],"name":"libsqlite3-0","purl":"pkg:deb/debian/libsqlite3-0@3.34.1-3?arch=amd64&distro=debian-11.7&upstream=sqlite3","type":"deb","version":"3.34.1-3","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-0/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libsqlite3-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-35737","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"sqlite3","version":"3.34.1-3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-35737","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-35737","cwe":"CWE-129","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-35737","date":"2026-10-08","epss":0.22774,"percentile":0.97683}],"risk":1.1387,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-35737","description":"SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API."},"relatedVulnerabilities":[{"id":"CVE-2022-35737","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-35737","cwe":"CWE-129","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-35737","date":"2026-10-08","epss":0.22774,"percentile":0.97683}],"urls":["https://blog.trailofbits.com/2022/10/25/sqlite-vulnerability-july-2022-library-api/","https://kb.cert.org/vuls/id/720344","https://security.gentoo.org/glsa/202210-40","https://security.netapp.com/advisory/ntap-20220915-0009/","https://sqlite.org/releaselog/3_39_2.html","https://www.sqlite.org/cves.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-35737","description":"SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1705","versionConstraint":"<1.19.8||>=1.20.0-0,<1.20.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1705","fix":{"state":"fixed","versions":["1.19.8","1.20.3"],"available":[{"date":"2023-04-04","kind":"release","version":"1.19.8"},{"date":"2023-04-04","kind":"release","version":"1.20.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24536","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24536","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24536","date":"2026-10-08","epss":0.01479,"percentile":0.73108}],"risk":1.10925,"urls":["https://go.dev/cl/482076","https://go.dev/cl/482075","https://go.dev/cl/482077","https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/59153","description":"Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts.\n\nThis stems from several causes:\n\n1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consume. ReadForm can undercount the amount of memory consumed, leading it to accept larger inputs than intended.\n2. Limiting total memory does not account for increased pressure on the garbage collector from large numbers of small allocations in forms with many parts.\n3. ReadForm can allocate a large number of short-lived buffers, further increasing pressure on the garbage collector.\n\nThe combination of these factors can permit an attacker to cause an program that parses multipart forms to consume large amounts of CPU and memory, potentially resulting in a denial of service. This affects programs that use mime/multipart.Reader.ReadForm, as well as form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue.\n\nWith fix, ReadForm now does a better job of estimating the memory consumption of parsed forms, and performs many fewer short-lived allocations.\n\nIn addition, the fixed mime/multipart.Reader imposes the following limits on the size of parsed forms:\n\n1. Forms parsed with ReadForm may contain no more than 1000 parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxparts=.\n2. Form parts parsed with NextPart and NextRawPart may contain no more than 10,000 header fields. In addition, forms parsed with ReadForm may contain no more than 10,000 header fields across all parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxheaders=."},"relatedVulnerabilities":[{"id":"CVE-2023-24536","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24536","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24536","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24536","date":"2026-10-08","epss":0.01479,"percentile":0.73108}],"urls":["https://go.dev/cl/482075","https://go.dev/cl/482076","https://go.dev/cl/482077","https://go.dev/issue/59153","https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8","https://pkg.go.dev/vuln/GO-2023-1705","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20230526-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-24536","description":"Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consume. ReadForm can undercount the amount of memory consumed, leading it to accept larger inputs than intended. 2. Limiting total memory does not account for increased pressure on the garbage collector from large numbers of small allocations in forms with many parts. 3. ReadForm can allocate a large number of short-lived buffers, further increasing pressure on the garbage collector. The combination of these factors can permit an attacker to cause an program that parses multipart forms to consume large amounts of CPU and memory, potentially resulting in a denial of service. This affects programs that use mime/multipart.Reader.ReadForm, as well as form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. With fix, ReadForm now does a better job of estimating the memory consumption of parsed forms, and performs many fewer short-lived allocations. In addition, the fixed mime/multipart.Reader imposes the following limits on the size of parsed forms: 1. Forms parsed with ReadForm may contain no more than 1000 parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxparts=. 2. Form parts parsed with NextPart and NextRawPart may contain no more than 10,000 header fields. In addition, forms parsed with ReadForm may contain no more than 10,000 header fields across all parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxheaders=."}]},{"artifact":{"id":"ca486551fc457136","cpes":["cpe:2.3:a:golang:text:v0.3.7:*:*:*:*:*:*:*"],"name":"golang.org/x/text","purl":"pkg:golang/golang.org/x/text@v0.3.7","type":"go-module","version":"v0.3.7","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.3.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-69ch-w2m2-3vjp","versionConstraint":"<0.3.8 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/text","version":"v0.3.7"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-69ch-w2m2-3vjp","fix":{"state":"fixed","versions":["0.3.8"],"available":[{"date":"2023-02-23","kind":"first-observed","version":"0.3.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-32149","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-32149","date":"2026-10-08","epss":0.01474,"percentile":0.7303}],"risk":1.1055,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-32149","https://go.dev/cl/442235","https://go.dev/issue/56152","https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ","https://pkg.go.dev/vuln/GO-2022-1059","https://github.com/golang/go/issues/56152","https://github.com/golang/text/commit/434eadcdbc3b0256971992e8c70027278364c72c","https://security.netapp.com/advisory/ntap-20230203-0006"],"severity":"High","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-69ch-w2m2-3vjp","description":"golang.org/x/text/language Denial of service via crafted Accept-Language header"},"relatedVulnerabilities":[{"id":"CVE-2022-32149","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-32149","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-32149","date":"2026-10-08","epss":0.01474,"percentile":0.7303}],"urls":["https://go.dev/cl/442235","https://go.dev/issue/56152","https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ","https://pkg.go.dev/vuln/GO-2022-1059","https://security.netapp.com/advisory/ntap-20230203-0006/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-32149","description":"An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse."}]},{"artifact":{"id":"7e630e3851da5911","cpes":["cpe:2.3:a:org.sonatype.oss:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:org.json:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:sonatype:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:json:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:oss:json:20190722:*:*:*:*:*:*:*"],"name":"json","purl":"pkg:maven/org.json/json@20190722","type":"java-archive","version":"20190722","language":"java","licenses":["http://json.org/license.html"],"metadata":{"pomGroupID":"org.json","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jackson2-api.hpi:WEB-INF/lib/json-20190722.jar","manifestName":"","pomArtifactID":"json","archiveDigests":[{"value":"07bce7bacf0ab5e9f894d307a3de8b7f540064d5","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jackson2-api.hpi:WEB-INF/lib/json-20190722.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"20231013"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4jq9-2xhw-jpx7","versionConstraint":"<=20230618 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.json:json","version":"20190722"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4jq9-2xhw-jpx7","fix":{"state":"fixed","versions":["20231013"],"available":[{"date":"2023-11-15","kind":"first-observed","version":"20231013"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5072","date":"2026-10-08","epss":0.01449,"percentile":0.72543}],"risk":1.0867499999999999,"urls":["https://github.com/google/security-research/security/advisories/GHSA-4jq9-2xhw-jpx7","https://nvd.nist.gov/vuln/detail/CVE-2023-5072","https://github.com/stleary/JSON-java/issues/758","https://github.com/stleary/JSON-java/issues/771","https://github.com/stleary/JSON-java/pull/759","https://github.com/stleary/JSON-java/commit/60662e2f8384d3449822a3a1179bfe8de67b55bb"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4jq9-2xhw-jpx7","description":"Java: DoS Vulnerability in JSON-JAVA"},"relatedVulnerabilities":[{"id":"CVE-2023-5072","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5072","date":"2026-10-08","epss":0.01449,"percentile":0.72543}],"urls":["http://www.openwall.com/lists/oss-security/2023/12/13/4","https://github.com/stleary/JSON-java/issues/758","https://github.com/stleary/JSON-java/issues/771","https://security.netapp.com/advisory/ntap-20240621-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5072","description":"Denial of Service  in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used."}]},{"artifact":{"id":"42e9d263d6d418ac","cpes":["cpe:2.3:a:org.sonatype.oss:json:20220924:*:*:*:*:*:*:*","cpe:2.3:a:org.json:json:20220924:*:*:*:*:*:*:*","cpe:2.3:a:sonatype:json:20220924:*:*:*:*:*:*:*","cpe:2.3:a:json:json:20220924:*:*:*:*:*:*:*","cpe:2.3:a:oss:json:20220924:*:*:*:*:*:*:*"],"name":"json","purl":"pkg:maven/org.json/json@20220924","type":"java-archive","version":"20220924","language":"java","licenses":["Public Domain"],"metadata":{"pomGroupID":"org.json","virtualPath":"/opt/jenkins-plugin-manager.jar:org.json:json","manifestName":"","pomArtifactID":"json","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:28ce38a426e8c5f4d5c1503345486bf2d71355572ce12a34d66ff30128719565","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"20231013"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4jq9-2xhw-jpx7","versionConstraint":"<=20230618 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.json:json","version":"20220924"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4jq9-2xhw-jpx7","fix":{"state":"fixed","versions":["20231013"],"available":[{"date":"2023-11-15","kind":"first-observed","version":"20231013"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5072","date":"2026-10-08","epss":0.01449,"percentile":0.72543}],"risk":1.0867499999999999,"urls":["https://github.com/google/security-research/security/advisories/GHSA-4jq9-2xhw-jpx7","https://nvd.nist.gov/vuln/detail/CVE-2023-5072","https://github.com/stleary/JSON-java/issues/758","https://github.com/stleary/JSON-java/issues/771","https://github.com/stleary/JSON-java/pull/759","https://github.com/stleary/JSON-java/commit/60662e2f8384d3449822a3a1179bfe8de67b55bb"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4jq9-2xhw-jpx7","description":"Java: DoS Vulnerability in JSON-JAVA"},"relatedVulnerabilities":[{"id":"CVE-2023-5072","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5072","date":"2026-10-08","epss":0.01449,"percentile":0.72543}],"urls":["http://www.openwall.com/lists/oss-security/2023/12/13/4","https://github.com/stleary/JSON-java/issues/758","https://github.com/stleary/JSON-java/issues/771","https://security.netapp.com/advisory/ntap-20240621-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5072","description":"Denial of Service  in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used."}]},{"artifact":{"id":"70f5c0ca66fb0bc8","cpes":["cpe:2.3:a:org.sonatype.oss:json:20230227:*:*:*:*:*:*:*","cpe:2.3:a:org.json:json:20230227:*:*:*:*:*:*:*","cpe:2.3:a:sonatype:json:20230227:*:*:*:*:*:*:*","cpe:2.3:a:json:json:20230227:*:*:*:*:*:*:*","cpe:2.3:a:oss:json:20230227:*:*:*:*:*:*:*"],"name":"json","purl":"pkg:maven/org.json/json@20230227","type":"java-archive","version":"20230227","language":"java","licenses":["https://github.com/stleary/JSON-java/blob/master/LICENSE"],"metadata":{"pomGroupID":"org.json","virtualPath":"/usr/share/jenkins/ref/plugins/jackson2-api.jpi:WEB-INF/lib/json-20230227.jar","manifestName":"","pomArtifactID":"json","archiveDigests":[{"value":"7a0d4aca76513d8ce81f9b044ce8126b84809ad8","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/jackson2-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/jackson2-api.jpi:WEB-INF/lib/json-20230227.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"20231013"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4jq9-2xhw-jpx7","versionConstraint":"<=20230618 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.json:json","version":"20230227"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4jq9-2xhw-jpx7","fix":{"state":"fixed","versions":["20231013"],"available":[{"date":"2023-11-15","kind":"first-observed","version":"20231013"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5072","date":"2026-10-08","epss":0.01449,"percentile":0.72543}],"risk":1.0867499999999999,"urls":["https://github.com/google/security-research/security/advisories/GHSA-4jq9-2xhw-jpx7","https://nvd.nist.gov/vuln/detail/CVE-2023-5072","https://github.com/stleary/JSON-java/issues/758","https://github.com/stleary/JSON-java/issues/771","https://github.com/stleary/JSON-java/pull/759","https://github.com/stleary/JSON-java/commit/60662e2f8384d3449822a3a1179bfe8de67b55bb"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4jq9-2xhw-jpx7","description":"Java: DoS Vulnerability in JSON-JAVA"},"relatedVulnerabilities":[{"id":"CVE-2023-5072","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5072","date":"2026-10-08","epss":0.01449,"percentile":0.72543}],"urls":["http://www.openwall.com/lists/oss-security/2023/12/13/4","https://github.com/stleary/JSON-java/issues/758","https://github.com/stleary/JSON-java/issues/771","https://security.netapp.com/advisory/ntap-20240621-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5072","description":"Denial of Service  in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used."}]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-32988","versionConstraint":"< 3.7.1-5+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-32988","fix":{"state":"fixed","versions":["3.7.1-5+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"3.7.1-5+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32988","cwe":"CWE-415","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32988","date":"2026-10-08","epss":0.01373,"percentile":0.71137}],"risk":1.077805,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-32988","description":"A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not own, leading to a double-free condition when the parent function or caller later attempts to free the same structure.  This vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or memory corruption, depending on allocator behavior."},"relatedVulnerabilities":[{"id":"CVE-2025-32988","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32988","cwe":"CWE-415","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32988","date":"2026-10-08","epss":0.01373,"percentile":0.71137}],"urls":["https://access.redhat.com/errata/RHSA-2025:16115","https://access.redhat.com/errata/RHSA-2025:16116","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:17348","https://access.redhat.com/errata/RHSA-2025:17361","https://access.redhat.com/errata/RHSA-2025:17415","https://access.redhat.com/errata/RHSA-2025:19088","https://access.redhat.com/errata/RHSA-2025:22529","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/security/cve/CVE-2025-32988","https://bugzilla.redhat.com/show_bug.cgi?id=2359622","https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html","http://www.openwall.com/lists/oss-security/2025/07/11/3","https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-32988","description":"A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not own, leading to a double-free condition when the parent function or caller later attempts to free the same structure.\n\nThis vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or memory corruption, depending on allocator behavior."}]},{"artifact":{"id":"29f75eac1d5f2b35","cpes":["cpe:2.3:a:org.codehaus.jettison.jettison:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:org.codehaus.jettison:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:org.codehaus:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:codehaus:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:jettison:jettison:1.3.7:*:*:*:*:*:*:*"],"name":"jettison","purl":"pkg:maven/org.codehaus.jettison/jettison@1.3.7","type":"java-archive","version":"1.3.7","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"org.codehaus.jettison","virtualPath":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi:WEB-INF/lib/jettison-1.3.7.jar","manifestName":"","pomArtifactID":"jettison","archiveDigests":[{"value":"7d36a59a0577f11b12088b9e215d6860345b9e1d","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi:WEB-INF/lib/jettison-1.3.7.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.5.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7rf3-mqpx-h7xg","versionConstraint":"<1.5.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.codehaus.jettison:jettison","version":"1.3.7"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-7rf3-mqpx-h7xg","fix":{"state":"fixed","versions":["1.5.2"],"available":[{"date":"2023-01-05","kind":"first-observed","version":"1.5.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45685","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45685","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45685","date":"2026-10-08","epss":0.01435,"percentile":0.723}],"risk":1.07625,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-45685","https://github.com/jettison-json/jettison/issues/54","https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html","https://www.debian.org/security/2023/dsa-5312"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7rf3-mqpx-h7xg","description":"Jettison Out-of-bounds Write vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2022-45685","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45685","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45685","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45685","date":"2026-10-08","epss":0.01435,"percentile":0.723}],"urls":["https://github.com/jettison-json/jettison/issues/54","https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html","https://www.debian.org/security/2023/dsa-5312"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-45685","description":"A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data."}]},{"artifact":{"id":"29f75eac1d5f2b35","cpes":["cpe:2.3:a:org.codehaus.jettison.jettison:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:org.codehaus.jettison:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:org.codehaus:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:codehaus:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:jettison:jettison:1.3.7:*:*:*:*:*:*:*"],"name":"jettison","purl":"pkg:maven/org.codehaus.jettison/jettison@1.3.7","type":"java-archive","version":"1.3.7","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"org.codehaus.jettison","virtualPath":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi:WEB-INF/lib/jettison-1.3.7.jar","manifestName":"","pomArtifactID":"jettison","archiveDigests":[{"value":"7d36a59a0577f11b12088b9e215d6860345b9e1d","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi:WEB-INF/lib/jettison-1.3.7.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.5.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-grr4-wv38-f68w","versionConstraint":"<1.5.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.codehaus.jettison:jettison","version":"1.3.7"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-grr4-wv38-f68w","fix":{"state":"fixed","versions":["1.5.2"],"available":[{"date":"2023-01-05","kind":"first-observed","version":"1.5.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45693","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45693","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45693","date":"2026-10-08","epss":0.01435,"percentile":0.723}],"risk":1.07625,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-45693","https://github.com/jettison-json/jettison/issues/52","https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html","https://www.debian.org/security/2023/dsa-5312"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-grr4-wv38-f68w","description":"Jettison Out-of-bounds Write vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2022-45693","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45693","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45693","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45693","date":"2026-10-08","epss":0.01435,"percentile":0.723}],"urls":["https://github.com/jettison-json/jettison/issues/52","https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html","https://www.debian.org/security/2023/dsa-5312"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-45693","description":"Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string."}]},{"artifact":{"id":"23e2e3b7c0b30450","cpes":["cpe:2.3:a:org.eclipse.jetty.http2:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.http2:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.http2:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-common:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-common:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_common:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_common:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2-common:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2_common:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2-common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2_common:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:http2:http2:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:http2:10.0.15:*:*:*:*:*:*:*"],"name":"http2-common","purl":"pkg:maven/org.eclipse.jetty.http2/http2-common@10.0.15","type":"java-archive","version":"10.0.15","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jetty.http2","virtualPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar:org.eclipse.jetty.http2:http2-common","manifestName":"","pomArtifactID":"http2-common","archiveDigests":null},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"10.0.20"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rggv-cv7r-mw98","versionConstraint":">=10.0.0,<=10.0.19 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jetty.http2:http2-common","version":"10.0.15"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-rggv-cv7r-mw98","fix":{"state":"fixed","versions":["10.0.20"],"available":[{"date":"2024-02-27","kind":"first-observed","version":"10.0.20"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22201","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22201","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-22201","date":"2026-10-08","epss":0.01433,"percentile":0.72268}],"risk":1.07475,"urls":["https://github.com/jetty/jetty.project/security/advisories/GHSA-rggv-cv7r-mw98","https://nvd.nist.gov/vuln/detail/CVE-2024-22201","https://github.com/jetty/jetty.project/issues/11256","https://github.com/jetty/jetty.project/issues/11259","https://github.com/jetty/jetty.project/commit/0839a208cdc3fcfe25206a77af59ba9fda260188","https://github.com/jetty/jetty.project/commit/b953871c9a5ff4fbca4a2499848f75182dbd9810","https://security.netapp.com/advisory/ntap-20240329-0001","https://lists.debian.org/debian-lts-announce/2024/04/msg00002.html","http://www.openwall.com/lists/oss-security/2024/03/20/2"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rggv-cv7r-mw98","description":"Connection leaking on idle timeout when TCP congested"},"relatedVulnerabilities":[{"id":"CVE-2024-22201","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22201","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-22201","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-22201","date":"2026-10-08","epss":0.01433,"percentile":0.72268}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/20/2","https://github.com/jetty/jetty.project/issues/11256","https://github.com/jetty/jetty.project/security/advisories/GHSA-rggv-cv7r-mw98","https://lists.debian.org/debian-lts-announce/2024/04/msg00002.html","https://security.netapp.com/advisory/ntap-20240329-0001/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22201","description":"Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to stop accepting new connections from valid clients. The vulnerability is patched in 9.4.54, 10.0.20, 11.0.20, and 12.0.6."}]},{"artifact":{"id":"69d810ec217871e5","cpes":["cpe:2.3:a:e2fsprogs:e2fsprogs:1.46.2-2:*:*:*:*:*:*:*"],"name":"e2fsprogs","purl":"pkg:deb/debian/e2fsprogs@1.46.2-2?arch=amd64&distro=debian-11.7","type":"deb","version":"1.46.2-2","language":"","licenses":["sha256:b7b391571e7253d4cf607e33e3b463895768fad264471e7774882974f834faa1"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/e2fsprogs/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/e2fsprogs/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/e2fsprogs.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/e2fsprogs.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/e2fsprogs.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/e2fsprogs.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/e2fsprogs.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/e2fsprogs.list"},{"path":"/var/lib/dpkg/info/e2fsprogs.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/e2fsprogs.postinst"},{"path":"/var/lib/dpkg/info/e2fsprogs.postrm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/e2fsprogs.postrm"},{"path":"/var/lib/dpkg/info/e2fsprogs.preinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/e2fsprogs.preinst"},{"path":"/var/lib/dpkg/info/e2fsprogs.prerm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/e2fsprogs.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.46.2-2+deb11u1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-1304","versionConstraint":"< 1.46.2-2+deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"e2fsprogs","version":"1.46.2-2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-1304","fix":{"state":"fixed","versions":["1.46.2-2+deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.46.2-2+deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-1304","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1304","date":"2026-10-08","epss":0.01393,"percentile":0.71541}],"risk":1.065645,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-1304","description":"An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem."},"relatedVulnerabilities":[{"id":"CVE-2022-1304","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-1304","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1304","date":"2026-10-08","epss":0.01393,"percentile":0.71541}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2069726","https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html","https://security.netapp.com/advisory/ntap-20241122-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1304","description":"An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem."}]},{"artifact":{"id":"f85ea9b245f2d495","cpes":["cpe:2.3:a:libcom-err2:libcom-err2:1.46.2-2:*:*:*:*:*:*:*","cpe:2.3:a:libcom-err2:libcom_err2:1.46.2-2:*:*:*:*:*:*:*","cpe:2.3:a:libcom_err2:libcom-err2:1.46.2-2:*:*:*:*:*:*:*","cpe:2.3:a:libcom_err2:libcom_err2:1.46.2-2:*:*:*:*:*:*:*","cpe:2.3:a:libcom:libcom-err2:1.46.2-2:*:*:*:*:*:*:*","cpe:2.3:a:libcom:libcom_err2:1.46.2-2:*:*:*:*:*:*:*"],"name":"libcom-err2","purl":"pkg:deb/debian/libcom-err2@1.46.2-2?arch=amd64&distro=debian-11.7&upstream=e2fsprogs","type":"deb","version":"1.46.2-2","language":"","licenses":["sha256:9e3a4384b6d8d2358d44103f62bcd948328b3f8a63a1a6baa66abeb43302d581"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcom-err2/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libcom-err2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcom-err2:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libcom-err2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"e2fsprogs"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.46.2-2+deb11u1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-1304","versionConstraint":"< 1.46.2-2+deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"e2fsprogs","version":"1.46.2-2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-1304","fix":{"state":"fixed","versions":["1.46.2-2+deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.46.2-2+deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-1304","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1304","date":"2026-10-08","epss":0.01393,"percentile":0.71541}],"risk":1.065645,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-1304","description":"An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem."},"relatedVulnerabilities":[{"id":"CVE-2022-1304","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-1304","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1304","date":"2026-10-08","epss":0.01393,"percentile":0.71541}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2069726","https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html","https://security.netapp.com/advisory/ntap-20241122-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1304","description":"An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem."}]},{"artifact":{"id":"7b8df9250227bf38","cpes":["cpe:2.3:a:libext2fs2:libext2fs2:1.46.2-2:*:*:*:*:*:*:*"],"name":"libext2fs2","purl":"pkg:deb/debian/libext2fs2@1.46.2-2?arch=amd64&distro=debian-11.7&upstream=e2fsprogs","type":"deb","version":"1.46.2-2","language":"","licenses":["sha256:b7b391571e7253d4cf607e33e3b463895768fad264471e7774882974f834faa1"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libext2fs2/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libext2fs2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libext2fs2:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libext2fs2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"e2fsprogs"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.46.2-2+deb11u1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-1304","versionConstraint":"< 1.46.2-2+deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"e2fsprogs","version":"1.46.2-2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-1304","fix":{"state":"fixed","versions":["1.46.2-2+deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.46.2-2+deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-1304","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1304","date":"2026-10-08","epss":0.01393,"percentile":0.71541}],"risk":1.065645,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-1304","description":"An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem."},"relatedVulnerabilities":[{"id":"CVE-2022-1304","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-1304","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1304","date":"2026-10-08","epss":0.01393,"percentile":0.71541}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2069726","https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html","https://security.netapp.com/advisory/ntap-20241122-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1304","description":"An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem."}]},{"artifact":{"id":"b0bb56f9514216a3","cpes":["cpe:2.3:a:libss2:libss2:1.46.2-2:*:*:*:*:*:*:*"],"name":"libss2","purl":"pkg:deb/debian/libss2@1.46.2-2?arch=amd64&distro=debian-11.7&upstream=e2fsprogs","type":"deb","version":"1.46.2-2","language":"","licenses":["sha256:6f717a1464301a641ac17e7301f1a1b221da802e8edf8cf4bc963721d487b146"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libss2/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libss2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libss2:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libss2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"e2fsprogs"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.46.2-2+deb11u1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-1304","versionConstraint":"< 1.46.2-2+deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"e2fsprogs","version":"1.46.2-2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-1304","fix":{"state":"fixed","versions":["1.46.2-2+deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.46.2-2+deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-1304","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1304","date":"2026-10-08","epss":0.01393,"percentile":0.71541}],"risk":1.065645,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-1304","description":"An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem."},"relatedVulnerabilities":[{"id":"CVE-2022-1304","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-1304","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1304","date":"2026-10-08","epss":0.01393,"percentile":0.71541}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2069726","https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html","https://security.netapp.com/advisory/ntap-20241122-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1304","description":"An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem."}]},{"artifact":{"id":"3aaf280b7ff4618a","cpes":["cpe:2.3:a:logsave:logsave:1.46.2-2:*:*:*:*:*:*:*"],"name":"logsave","purl":"pkg:deb/debian/logsave@1.46.2-2?arch=amd64&distro=debian-11.7&upstream=e2fsprogs","type":"deb","version":"1.46.2-2","language":"","licenses":["sha256:b7b391571e7253d4cf607e33e3b463895768fad264471e7774882974f834faa1"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/logsave/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/logsave/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/logsave.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/logsave.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/logsave.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/logsave.list"}],"upstreams":[{"name":"e2fsprogs"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.46.2-2+deb11u1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-1304","versionConstraint":"< 1.46.2-2+deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"e2fsprogs","version":"1.46.2-2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-1304","fix":{"state":"fixed","versions":["1.46.2-2+deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.46.2-2+deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-1304","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1304","date":"2026-10-08","epss":0.01393,"percentile":0.71541}],"risk":1.065645,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-1304","description":"An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem."},"relatedVulnerabilities":[{"id":"CVE-2022-1304","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1304","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-1304","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1304","date":"2026-10-08","epss":0.01393,"percentile":0.71541}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2069726","https://lists.debian.org/debian-lts-announce/2024/10/msg00001.html","https://security.netapp.com/advisory/ntap-20241122-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1304","description":"An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem."}]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-0567","versionConstraint":"< 3.7.1-5+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-0567","fix":{"state":"fixed","versions":["3.7.1-5+deb11u5"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"3.7.1-5+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0567","cwe":"CWE-347","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2024-0567","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-0567","date":"2026-10-08","epss":0.0142,"percentile":0.7202}],"risk":1.065,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-0567","description":"A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack."},"relatedVulnerabilities":[{"id":"CVE-2024-0567","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0567","cwe":"CWE-347","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2024-0567","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-0567","date":"2026-10-08","epss":0.0142,"percentile":0.7202}],"urls":["https://access.redhat.com/errata/RHSA-2024:0533","https://access.redhat.com/errata/RHSA-2024:1082","https://access.redhat.com/errata/RHSA-2024:1383","https://access.redhat.com/errata/RHSA-2024:2094","https://access.redhat.com/security/cve/CVE-2024-0567","https://bugzilla.redhat.com/show_bug.cgi?id=2258544","https://gitlab.com/gnutls/gnutls/-/issues/1521","https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html","http://www.openwall.com/lists/oss-security/2024/01/19/3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/","https://security.netapp.com/advisory/ntap-20240202-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0567","description":"A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack."}]},{"artifact":{"id":"a06dc8850c1b1b35","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.10-2\\+deb11u5:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.7&upstream=expat","type":"deb","version":"2.2.10-2+deb11u5","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.2.10-2+deb11u6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-45491","versionConstraint":"< 2.2.10-2+deb11u6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"expat","version":"2.2.10-2+deb11u5"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-45491","fix":{"state":"fixed","versions":["2.2.10-2+deb11u6"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"2.2.10-2+deb11u6"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-45491","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-45491","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-45491","date":"2026-10-08","epss":0.0113,"percentile":0.65386}],"risk":1.0622,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-45491","description":"An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX)."},"relatedVulnerabilities":[{"id":"CVE-2024-45491","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-45491","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-45491","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-45491","date":"2026-10-08","epss":0.0113,"percentile":0.65386}],"urls":["https://github.com/libexpat/libexpat/issues/888","https://github.com/libexpat/libexpat/pull/891","https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html","https://security.netapp.com/advisory/ntap-20241018-0003/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-45491","description":"An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX)."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.21.12"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2024-2963","versionConstraint":"<1.21.12||>=1.22.0-0,<1.22.5 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2024-2963","fix":{"state":"fixed","versions":["1.21.12","1.22.5"],"available":[{"date":"2024-07-02","kind":"release","version":"1.21.12"},{"date":"2024-07-02","kind":"release","version":"1.22.5"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-24791","date":"2026-10-08","epss":0.01414,"percentile":0.71922}],"risk":1.0605,"urls":["https://go.dev/issue/67555","https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/591255","description":"The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an \"Expect: 100-continue\" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail.\n\nAn attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending \"Expect: 100-continue\" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail."},"relatedVulnerabilities":[{"id":"CVE-2024-24791","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-24791","date":"2026-10-08","epss":0.01414,"percentile":0.71922}],"urls":["https://go.dev/cl/591255","https://go.dev/issue/67555","https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ","https://pkg.go.dev/vuln/GO-2024-2963","https://security.netapp.com/advisory/ntap-20241004-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-24791","description":"The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an \"Expect: 100-continue\" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending \"Expect: 100-continue\" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1702","versionConstraint":"<1.19.8||>=1.20.0-0,<1.20.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1702","fix":{"state":"fixed","versions":["1.19.8","1.20.3"],"available":[{"date":"2023-04-04","kind":"release","version":"1.19.8"},{"date":"2023-04-04","kind":"release","version":"1.20.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24537","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24537","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24537","date":"2026-10-08","epss":0.01412,"percentile":0.71885}],"risk":1.059,"urls":["https://go.dev/cl/482078","https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/59180","description":"Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow."},"relatedVulnerabilities":[{"id":"CVE-2023-24537","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24537","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24537","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24537","date":"2026-10-08","epss":0.01412,"percentile":0.71885}],"urls":["https://go.dev/cl/482078","https://go.dev/issue/59180","https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8","https://pkg.go.dev/vuln/GO-2023-1702","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20241129-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-24537","description":"Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow."}]},{"artifact":{"id":"b2e77aa5ecffb7d4","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4813","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-4813","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-08","epss":0.01926,"percentile":0.79336}],"risk":1.04967,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-4813","description":"A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge."},"relatedVulnerabilities":[{"id":"CVE-2023-4813","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-08","epss":0.01926,"percentile":0.79336}],"urls":["https://access.redhat.com/errata/RHBA-2024:2413","https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4813","https://bugzilla.redhat.com/show_bug.cgi?id=2237798","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://security.netapp.com/advisory/ntap-20231110-0003/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4813","description":"A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge."}]},{"artifact":{"id":"c2e60422a6017463","cpes":["cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4813","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-4813","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-08","epss":0.01926,"percentile":0.79336}],"risk":1.04967,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-4813","description":"A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge."},"relatedVulnerabilities":[{"id":"CVE-2023-4813","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-08","epss":0.01926,"percentile":0.79336}],"urls":["https://access.redhat.com/errata/RHBA-2024:2413","https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4813","https://bugzilla.redhat.com/show_bug.cgi?id=2237798","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://security.netapp.com/advisory/ntap-20231110-0003/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4813","description":"A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge."}]},{"artifact":{"id":"c3466eb679e28aa6","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A8.4p1-5%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=openssh","type":"deb","version":"1:8.4p1-5+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Beer-ware","Expat-with-advertising-restriction","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-client/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-6110","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssh","version":"1:8.4p1-5+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2019-6110","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-6110","cwe":"CWE-838","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-6110","cwe":"CWE-838","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-6110","date":"2026-10-08","epss":0.20906,"percentile":0.97507}],"risk":1.0453000000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-6110","description":"In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred."},"relatedVulnerabilities":[{"id":"CVE-2019-6110","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","metrics":{"baseScore":4,"impactScore":5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-6110","cwe":"CWE-838","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-6110","cwe":"CWE-838","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-6110","date":"2026-10-08","epss":0.20906,"percentile":0.97507}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c","https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c","https://security.gentoo.org/glsa/201903-16","https://security.netapp.com/advisory/ntap-20190213-0001/","https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt","https://www.exploit-db.com/exploits/46193/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-6110","description":"In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4138","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4138","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4138","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4138","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-4138","date":"2026-10-08","epss":0.01385,"percentile":0.71386}],"risk":1.0387499999999998,"urls":["https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f","https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4138","description":"Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links."},"relatedVulnerabilities":[]},{"artifact":{"id":"af7d166c6d421afa","cpes":["cpe:2.3:a:git:git:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git","purl":"pkg:deb/debian/git@1%3A2.30.2-1%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.list"},{"path":"/var/lib/dpkg/info/git.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postinst"},{"path":"/var/lib/dpkg/info/git.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postrm"},{"path":"/var/lib/dpkg/info/git.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.preinst"},{"path":"/var/lib/dpkg/info/git.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-32004","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-32004","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32004","cwe":"CWE-114","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-32004","date":"2026-10-08","epss":0.01351,"percentile":0.70675}],"risk":1.033515,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-32004","description":"Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources."},"relatedVulnerabilities":[{"id":"CVE-2024-32004","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":6.1,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32004","cwe":"CWE-114","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-32004","date":"2026-10-08","epss":0.01351,"percentile":0.70675}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/14/2","https://git-scm.com/docs/git-clone","https://github.com/git/git/commit/f4aa8c8bb11dae6e769cd930565173808cbb69c8","https://github.com/git/git/security/advisories/GHSA-xfc6-vwr8-r389","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S4CK4IYTXEOBZTEM5K3T6LWOIZ3S44AR/","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-32004","description":"Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources."}]},{"artifact":{"id":"64d1fb374de95eb2","cpes":["cpe:2.3:a:git-man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git-man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git-man","purl":"pkg:deb/debian/git-man@1%3A2.30.2-1%2Bdeb11u2?arch=all&distro=debian-11.7&upstream=git","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git-man/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git-man/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.list"}],"upstreams":[{"name":"git"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-32004","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-32004","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32004","cwe":"CWE-114","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-32004","date":"2026-10-08","epss":0.01351,"percentile":0.70675}],"risk":1.033515,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-32004","description":"Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources."},"relatedVulnerabilities":[{"id":"CVE-2024-32004","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":6.1,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32004","cwe":"CWE-114","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-32004","date":"2026-10-08","epss":0.01351,"percentile":0.70675}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/14/2","https://git-scm.com/docs/git-clone","https://github.com/git/git/commit/f4aa8c8bb11dae6e769cd930565173808cbb69c8","https://github.com/git/git/security/advisories/GHSA-xfc6-vwr8-r389","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S4CK4IYTXEOBZTEM5K3T6LWOIZ3S44AR/","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-32004","description":"Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-8088","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-8088","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.6||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-8088","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.6","3.13.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0rc2"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:X/RE:L/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-8088","cwe":"CWE-835","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2024-8088","date":"2026-10-08","epss":0.01275,"percentile":0.69058}],"risk":1.0327499999999998,"urls":["https://github.com/python/cpython/commit/0aa1ee22ab6e204e9d3d0e9dd63ea648ed691ef1","https://github.com/python/cpython/commit/2231286d78d328c2f575e0b05b16fe447d1656d6","https://github.com/python/cpython/commit/795f2597a4be988e2bb19b69ff9958e981cb894e","https://github.com/python/cpython/commit/7bc367e464ce50b956dd232c1dfa1cad4e7fb814","https://github.com/python/cpython/commit/7e8883a3f04d308302361aeffc73e0e9837f19d4","https://github.com/python/cpython/commit/8c7348939d8a3ecd79d630075f6be1b0c5b41f64","https://github.com/python/cpython/commit/95b073bddefa6243effa08e131e297c0383e7f6a","https://github.com/python/cpython/commit/962055268ed4f2ca1d717bfc8b6385de50a23ab7","https://github.com/python/cpython/commit/9cd03263100ddb1657826cc4a71470786cab3932","https://github.com/python/cpython/commit/dcc5182f27c1500006a1ef78e10613bb45788dea","https://github.com/python/cpython/commit/e0264a61119d551658d9445af38323ba94fc16db","https://github.com/python/cpython/commit/fc0b8259e693caa8400fa8b6ac1e494e47ea7798","https://github.com/python/cpython/issues/122905","https://github.com/python/cpython/issues/123270","https://github.com/python/cpython/pull/122906","https://mail.python.org/archives/list/security-announce@python.org/thread/GNFCKVI4TCATKQLALJ5SN4L4CSPSMILU/","http://www.openwall.com/lists/oss-security/2024/08/22/1","http://www.openwall.com/lists/oss-security/2024/08/22/4","http://www.openwall.com/lists/oss-security/2024/08/23/1","http://www.openwall.com/lists/oss-security/2024/08/23/2","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20241011-0010/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-8088","description":"There is a HIGH severity vulnerability affecting the CPython \"zipfile\"\nmodule affecting \"zipfile.Path\". Note that the more common API \"zipfile.ZipFile\" class is unaffected.\n\n\n\n\n\nWhen iterating over names of entries in a zip archive (for example, methods\nof \"zipfile.Path\" like \"namelist()\", \"iterdir()\", etc)\nthe process can be put into an infinite loop with a maliciously crafted\nzip archive. This defect applies when reading only metadata or extracting\nthe contents of the zip archive. Programs that are not handling\nuser-controlled zip archives are not affected."},"relatedVulnerabilities":[]},{"artifact":{"id":"6e6dd51c4a92fd43","cpes":["cpe:2.3:a:apache:commons-io:2.11.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:2.11.0:*:*:*:*:*:*:*"],"name":"commons-io","purl":"pkg:maven/commons-io/commons-io@2.11.0","type":"java-archive","version":"2.11.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"commons-io","virtualPath":"/usr/share/jenkins/ref/plugins/jira.jpi:WEB-INF/lib/commons-io-2.11.0.jar","manifestName":"","pomArtifactID":"commons-io","archiveDigests":[{"value":"a2503f302b11ebde7ebc3df41daebe0e4eea3689","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/jira.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/jira.jpi:WEB-INF/lib/commons-io-2.11.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.14.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-78wr-2p64-hpwj","versionConstraint":">=2.0,<2.14.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-io:commons-io","version":"2.11.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-78wr-2p64-hpwj","fix":{"state":"fixed","versions":["2.14.0"],"available":[{"date":"2024-10-04","kind":"first-observed","version":"2.14.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47554","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-47554","date":"2026-10-08","epss":0.01315,"percentile":0.69883}],"risk":1.0257,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-47554","https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1","http://www.openwall.com/lists/oss-security/2024/10/03/2","https://security.netapp.com/advisory/ntap-20250131-0010"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-78wr-2p64-hpwj","description":"Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader"},"relatedVulnerabilities":[{"id":"CVE-2024-47554","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47554","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-47554","date":"2026-10-08","epss":0.01315,"percentile":0.69883}],"urls":["https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1","http://www.openwall.com/lists/oss-security/2024/10/03/2","https://security.netapp.com/advisory/ntap-20250131-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-47554","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue."}]},{"artifact":{"id":"79c756e58e1ca856","cpes":["cpe:2.3:a:apache:commons-io:2.11.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:2.11.0:*:*:*:*:*:*:*"],"name":"commons-io","purl":"pkg:maven/commons-io/commons-io@2.11.0","type":"java-archive","version":"2.11.0","language":"java","licenses":[],"metadata":{"pomGroupID":"commons-io","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.407.jar:commons-io:commons-io","manifestName":"","pomArtifactID":"commons-io","archiveDigests":null},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/cli-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.14.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-78wr-2p64-hpwj","versionConstraint":">=2.0,<2.14.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-io:commons-io","version":"2.11.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-78wr-2p64-hpwj","fix":{"state":"fixed","versions":["2.14.0"],"available":[{"date":"2024-10-04","kind":"first-observed","version":"2.14.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47554","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-47554","date":"2026-10-08","epss":0.01315,"percentile":0.69883}],"risk":1.0257,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-47554","https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1","http://www.openwall.com/lists/oss-security/2024/10/03/2","https://security.netapp.com/advisory/ntap-20250131-0010"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-78wr-2p64-hpwj","description":"Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader"},"relatedVulnerabilities":[{"id":"CVE-2024-47554","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47554","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-47554","date":"2026-10-08","epss":0.01315,"percentile":0.69883}],"urls":["https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1","http://www.openwall.com/lists/oss-security/2024/10/03/2","https://security.netapp.com/advisory/ntap-20250131-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-47554","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue."}]},{"artifact":{"id":"d28d5e5b672be8d7","cpes":["cpe:2.3:a:apache:commons-io:2.11.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:2.11.0:*:*:*:*:*:*:*"],"name":"commons-io","purl":"pkg:maven/commons-io/commons-io@2.11.0","type":"java-archive","version":"2.11.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"commons-io","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-io-2.11.0.jar","manifestName":"","pomArtifactID":"commons-io","archiveDigests":[{"value":"a2503f302b11ebde7ebc3df41daebe0e4eea3689","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-io-2.11.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.14.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-78wr-2p64-hpwj","versionConstraint":">=2.0,<2.14.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-io:commons-io","version":"2.11.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-78wr-2p64-hpwj","fix":{"state":"fixed","versions":["2.14.0"],"available":[{"date":"2024-10-04","kind":"first-observed","version":"2.14.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47554","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-47554","date":"2026-10-08","epss":0.01315,"percentile":0.69883}],"risk":1.0257,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-47554","https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1","http://www.openwall.com/lists/oss-security/2024/10/03/2","https://security.netapp.com/advisory/ntap-20250131-0010"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-78wr-2p64-hpwj","description":"Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader"},"relatedVulnerabilities":[{"id":"CVE-2024-47554","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47554","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-47554","date":"2026-10-08","epss":0.01315,"percentile":0.69883}],"urls":["https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1","http://www.openwall.com/lists/oss-security/2024/10/03/2","https://security.netapp.com/advisory/ntap-20250131-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-47554","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue."}]},{"artifact":{"id":"aa3e87d130f6961b","cpes":["cpe:2.3:a:apache:commons-io:2.11.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:2.11.0:*:*:*:*:*:*:*"],"name":"commons-io","purl":"pkg:maven/commons-io/commons-io@2.11.0","type":"java-archive","version":"2.11.0","language":"java","licenses":[],"metadata":{"pomGroupID":"commons-io","virtualPath":"/opt/jenkins-plugin-manager.jar:commons-io:commons-io","manifestName":"","pomArtifactID":"commons-io","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:28ce38a426e8c5f4d5c1503345486bf2d71355572ce12a34d66ff30128719565","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.14.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-78wr-2p64-hpwj","versionConstraint":">=2.0,<2.14.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-io:commons-io","version":"2.11.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-78wr-2p64-hpwj","fix":{"state":"fixed","versions":["2.14.0"],"available":[{"date":"2024-10-04","kind":"first-observed","version":"2.14.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47554","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-47554","date":"2026-10-08","epss":0.01315,"percentile":0.69883}],"risk":1.0257,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-47554","https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1","http://www.openwall.com/lists/oss-security/2024/10/03/2","https://security.netapp.com/advisory/ntap-20250131-0010"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-78wr-2p64-hpwj","description":"Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader"},"relatedVulnerabilities":[{"id":"CVE-2024-47554","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47554","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-47554","date":"2026-10-08","epss":0.01315,"percentile":0.69883}],"urls":["https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1","http://www.openwall.com/lists/oss-security/2024/10/03/2","https://security.netapp.com/advisory/ntap-20250131-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-47554","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue."}]},{"artifact":{"id":"b2e77aa5ecffb7d4","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33599","versionConstraint":"< 2.31-13+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-33599","fix":{"state":"fixed","versions":["2.31-13+deb11u10"],"available":[{"date":"2024-05-03","kind":"advisory","version":"2.31-13+deb11u10"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-08","epss":0.0131,"percentile":0.69775}],"risk":1.0218,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5678-1","link":"https://security-tracker.debian.org/tracker/DSA-5678-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-33599","description":"nscd: Stack-based buffer overflow in netgroup cache  If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow.  This flaw was introduced in glibc 2.15 when the cache was added to nscd.  This vulnerability is only present in the nscd binary."},"relatedVulnerabilities":[{"id":"CVE-2024-33599","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-08","epss":0.0131,"percentile":0.69775}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0011/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33599","description":"nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow.  This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"c2e60422a6017463","cpes":["cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33599","versionConstraint":"< 2.31-13+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-33599","fix":{"state":"fixed","versions":["2.31-13+deb11u10"],"available":[{"date":"2024-05-03","kind":"advisory","version":"2.31-13+deb11u10"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-08","epss":0.0131,"percentile":0.69775}],"risk":1.0218,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5678-1","link":"https://security-tracker.debian.org/tracker/DSA-5678-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-33599","description":"nscd: Stack-based buffer overflow in netgroup cache  If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow.  This flaw was introduced in glibc 2.15 when the cache was added to nscd.  This vulnerability is only present in the nscd binary."},"relatedVulnerabilities":[{"id":"CVE-2024-33599","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-08","epss":0.0131,"percentile":0.69775}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0011/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33599","description":"nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow.  This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"a06dc8850c1b1b35","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.10-2\\+deb11u5:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.7&upstream=expat","type":"deb","version":"2.2.10-2+deb11u5","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-8176","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"expat","version":"2.2.10-2+deb11u5"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-8176","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-8176","cwe":"CWE-674","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-8176","date":"2026-10-08","epss":0.01353,"percentile":0.70728}],"risk":1.01475,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-8176","description":"A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage."},"relatedVulnerabilities":[{"id":"CVE-2024-8176","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-8176","cwe":"CWE-674","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-8176","date":"2026-10-08","epss":0.01353,"percentile":0.70728}],"urls":["https://access.redhat.com/errata/RHSA-2025:13681","https://access.redhat.com/errata/RHSA-2025:22033","https://access.redhat.com/errata/RHSA-2025:22034","https://access.redhat.com/errata/RHSA-2025:22035","https://access.redhat.com/errata/RHSA-2025:22607","https://access.redhat.com/errata/RHSA-2025:22785","https://access.redhat.com/errata/RHSA-2025:22842","https://access.redhat.com/errata/RHSA-2025:22871","https://access.redhat.com/errata/RHSA-2025:3531","https://access.redhat.com/errata/RHSA-2025:3734","https://access.redhat.com/errata/RHSA-2025:3913","https://access.redhat.com/errata/RHSA-2025:4048","https://access.redhat.com/errata/RHSA-2025:4446","https://access.redhat.com/errata/RHSA-2025:4447","https://access.redhat.com/errata/RHSA-2025:4448","https://access.redhat.com/errata/RHSA-2025:4449","https://access.redhat.com/errata/RHSA-2025:7444","https://access.redhat.com/errata/RHSA-2025:7512","https://access.redhat.com/errata/RHSA-2025:8385","https://access.redhat.com/security/cve/CVE-2024-8176","https://bugzilla.redhat.com/show_bug.cgi?id=2310137","https://github.com/libexpat/libexpat/issues/893","https://github.com/libexpat/libexpat/pull/973","http://seclists.org/fulldisclosure/2025/May/10","http://seclists.org/fulldisclosure/2025/May/11","http://seclists.org/fulldisclosure/2025/May/12","http://seclists.org/fulldisclosure/2025/May/6","http://seclists.org/fulldisclosure/2025/May/7","http://seclists.org/fulldisclosure/2025/May/8","http://www.openwall.com/lists/oss-security/2025/03/15/1","http://www.openwall.com/lists/oss-security/2025/09/24/11","https://blog.hartwork.org/posts/expat-2-7-0-released/","https://bugzilla.suse.com/show_bug.cgi?id=1239618","https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes#L40-L52","https://gitlab.alpinelinux.org/alpine/aports/-/commit/d068c3ff36fc6f4789988a09c69b434db757db53","https://security-tracker.debian.org/tracker/CVE-2024-8176","https://security.netapp.com/advisory/ntap-20250328-0009/","https://ubuntu.com/security/CVE-2024-8176","https://www.kb.cert.org/vuls/id/760160"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-8176","description":"A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage."}]},{"artifact":{"id":"a06dc8850c1b1b35","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.10-2\\+deb11u5:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.7&upstream=expat","type":"deb","version":"2.2.10-2+deb11u5","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-59375","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"expat","version":"2.2.10-2+deb11u5"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-59375","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-59375","cwe":"CWE-770","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-59375","date":"2026-10-08","epss":0.01315,"percentile":0.69879}],"risk":0.98625,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-59375","description":"libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing."},"relatedVulnerabilities":[{"id":"CVE-2025-59375","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-59375","cwe":"CWE-770","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-59375","date":"2026-10-08","epss":0.01315,"percentile":0.69879}],"urls":["https://github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da9730b5f50fbd2bf/expat/Changes#L45-L74","https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes","https://github.com/libexpat/libexpat/issues/1018","https://github.com/libexpat/libexpat/pull/1034","https://issues.oss-fuzz.com/issues/439133977","http://www.openwall.com/lists/oss-security/2025/09/16/2","http://www.openwall.com/lists/oss-security/2026/05/01/5","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-089022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-59375","description":"libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-28321","versionConstraint":"< 7.74.0-1.3+deb11u9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-28321","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u9"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u9"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-28321","cwe":"CWE-295","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-28321","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-28321","date":"2026-10-08","epss":0.01806,"percentile":0.77908}],"risk":0.9842700000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-28321","description":"An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`."},"relatedVulnerabilities":[{"id":"CVE-2023-28321","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-28321","cwe":"CWE-295","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-28321","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-28321","date":"2026-10-08","epss":0.01806,"percentile":0.77908}],"urls":["http://seclists.org/fulldisclosure/2023/Jul/47","http://seclists.org/fulldisclosure/2023/Jul/48","http://seclists.org/fulldisclosure/2023/Jul/52","https://hackerone.com/reports/1950627","https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230609-0009/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-28321","description":"An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-28321","versionConstraint":"< 7.74.0-1.3+deb11u9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-28321","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u9"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u9"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-28321","cwe":"CWE-295","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-28321","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-28321","date":"2026-10-08","epss":0.01806,"percentile":0.77908}],"risk":0.9842700000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-28321","description":"An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`."},"relatedVulnerabilities":[{"id":"CVE-2023-28321","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-28321","cwe":"CWE-295","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-28321","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-28321","date":"2026-10-08","epss":0.01806,"percentile":0.77908}],"urls":["http://seclists.org/fulldisclosure/2023/Jul/47","http://seclists.org/fulldisclosure/2023/Jul/48","http://seclists.org/fulldisclosure/2023/Jul/52","https://hackerone.com/reports/1950627","https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230609-0009/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-28321","description":"An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-28321","versionConstraint":"< 7.74.0-1.3+deb11u9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-28321","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u9"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u9"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-28321","cwe":"CWE-295","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-28321","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-28321","date":"2026-10-08","epss":0.01806,"percentile":0.77908}],"risk":0.9842700000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-28321","description":"An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`."},"relatedVulnerabilities":[{"id":"CVE-2023-28321","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-28321","cwe":"CWE-295","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-28321","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-28321","date":"2026-10-08","epss":0.01806,"percentile":0.77908}],"urls":["http://seclists.org/fulldisclosure/2023/Jul/47","http://seclists.org/fulldisclosure/2023/Jul/48","http://seclists.org/fulldisclosure/2023/Jul/52","https://hackerone.com/reports/1950627","https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230609-0009/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-28321","description":"An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as \"Subject Alternative Name\" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS library. This private wildcard matching function would match IDN (International Domain Name) hosts incorrectly and could as a result accept patterns that otherwise should mismatch. IDN hostnames are converted to puny code before used for certificate checks. Puny coded names always start with `xn--` and should not be allowed to pattern match, but the wildcard check in curl could still check for `x*`, which would match even though the IDN name most likely contained nothing even resembling an `x`."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-34180","versionConstraint":"< 1.1.1w-0+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-34180","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u8"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"1.1.1w-0+deb11u8"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34180","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34180","date":"2026-10-08","epss":0.01311,"percentile":0.69792}],"risk":0.9832500000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-34180","description":"Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms.  Impact summary: The heap buffer over-read may crash the application (Denial of Service) or to load into the decoded ASN.1 object contents of memory beyond the end of the input buffer.  More typically such ASN.1 elements would instead be truncated.  An integer truncation in OpenSSL's ASN.1 decoder causes the content length of an ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the worst case the truncated length is treated as a request to scan the binary content for a terminating zero byte, possibly causing OpenSSL to read either less than or beyond the end of the allocated buffer.  Applications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or any other d2i_* decoding function are affected. OpenSSL's own command-line tools are not vulnerable, as data read through the BIO layer is checked before it reaches the affected code. The issue only affects 64-bit Unix and Unix-like platforms; 32-bit platforms and 64-bit Windows are not affected.  The FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-34180","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34180","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34180","date":"2026-10-08","epss":0.01311,"percentile":0.69792}],"urls":["https://github.com/openssl/openssl/commit/1c6908e4fa5fa568752221d8eaf561a809751e5d","https://github.com/openssl/openssl/commit/cbe418ae978539cf14a398a207dba834c0e93e83","https://github.com/openssl/openssl/commit/d93853c42110d6319e3df07842b488cb9f7ac5ff","https://github.com/openssl/openssl/commit/da5d62af75f69d6fbf7803743d7c56ac75461e43","https://github.com/openssl/openssl/commit/f696c73c3e61b8c502d040af62e690c060908a16","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34180","description":"Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer.  More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL's ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL's own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-34180","versionConstraint":"< 1.1.1w-0+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-34180","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u8"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"1.1.1w-0+deb11u8"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34180","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34180","date":"2026-10-08","epss":0.01311,"percentile":0.69792}],"risk":0.9832500000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-34180","description":"Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms.  Impact summary: The heap buffer over-read may crash the application (Denial of Service) or to load into the decoded ASN.1 object contents of memory beyond the end of the input buffer.  More typically such ASN.1 elements would instead be truncated.  An integer truncation in OpenSSL's ASN.1 decoder causes the content length of an ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the worst case the truncated length is treated as a request to scan the binary content for a terminating zero byte, possibly causing OpenSSL to read either less than or beyond the end of the allocated buffer.  Applications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or any other d2i_* decoding function are affected. OpenSSL's own command-line tools are not vulnerable, as data read through the BIO layer is checked before it reaches the affected code. The issue only affects 64-bit Unix and Unix-like platforms; 32-bit platforms and 64-bit Windows are not affected.  The FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-34180","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34180","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34180","date":"2026-10-08","epss":0.01311,"percentile":0.69792}],"urls":["https://github.com/openssl/openssl/commit/1c6908e4fa5fa568752221d8eaf561a809751e5d","https://github.com/openssl/openssl/commit/cbe418ae978539cf14a398a207dba834c0e93e83","https://github.com/openssl/openssl/commit/d93853c42110d6319e3df07842b488cb9f7ac5ff","https://github.com/openssl/openssl/commit/da5d62af75f69d6fbf7803743d7c56ac75461e43","https://github.com/openssl/openssl/commit/f696c73c3e61b8c502d040af62e690c060908a16","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34180","description":"Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer.  More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL's ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL's own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-7210","versionConstraint":"< 3.10.22||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-7210","fix":{"state":"fixed","versions":["3.10.22","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b2"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"3.10.22"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-05","kind":"first-observed","version":"3.15.0b2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-10-08","epss":0.01351,"percentile":0.70668}],"risk":0.97272,"urls":["https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4","https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566","https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56","https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b","https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286","https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a","https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f","https://github.com/python/cpython/issues/149018","https://github.com/python/cpython/pull/149023","https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/","http://www.openwall.com/lists/oss-security/2026/05/11/13","http://www.openwall.com/lists/oss-security/2026/05/11/8"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","description":"`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch."},"relatedVulnerabilities":[]},{"artifact":{"id":"25ad583843de9509","cpes":["cpe:2.3:a:org.eclipse.jetty:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-http:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-http:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_http:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_http:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-http:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_http:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty:10.0.15:*:*:*:*:*:*:*"],"name":"jetty-http","purl":"pkg:maven/org.eclipse.jetty/jetty-http@10.0.15","type":"java-archive","version":"10.0.15","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jetty","virtualPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar:org.eclipse.jetty:jetty-http","manifestName":"","pomArtifactID":"jetty-http","archiveDigests":null},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"10.0.28"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-355h-qmc2-wpwf","versionConstraint":">=10.0.0,<=10.0.27 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jetty:jetty-http","version":"10.0.15"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-355h-qmc2-wpwf","fix":{"state":"fixed","versions":["10.0.28"],"available":[{"date":"2026-04-15","kind":"first-observed","version":"10.0.28"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-2332","cwe":"CWE-444","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2026-2332","cwe":"CWE-444","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-2332","date":"2026-10-08","epss":0.01305,"percentile":0.69668}],"risk":0.972225,"urls":["https://github.com/jetty/jetty.project/security/advisories/GHSA-355h-qmc2-wpwf","https://nvd.nist.gov/vuln/detail/CVE-2026-2332","https://gitlab.eclipse.org/security/cve-assignment/-/issues/89","https://w4ke.info/2025/06/18/funky-chunks.html","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2332.json","https://bugzilla.redhat.com/show_bug.cgi?id=2458187","https://access.redhat.com/security/cve/CVE-2026-2332","https://access.redhat.com/errata/RHSA-2026:50263","https://access.redhat.com/errata/RHSA-2026:50223","https://access.redhat.com/errata/RHSA-2026:50222","https://access.redhat.com/errata/RHSA-2026:50221","https://access.redhat.com/errata/RHSA-2026:25089","https://access.redhat.com/errata/RHSA-2026:22453","https://access.redhat.com/errata/RHSA-2026:21773","https://access.redhat.com/errata/RHSA-2026:20568","https://access.redhat.com/errata/RHSA-2026:17668","https://access.redhat.com/errata/RHSA-2026:14272","https://access.redhat.com/errata/RHSA-2026:10175"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-355h-qmc2-wpwf","description":"Jetty has HTTP Request Smuggling via Chunked Extension Quoted-String Parsing"},"relatedVulnerabilities":[{"id":"CVE-2026-2332","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-2332","cwe":"CWE-444","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2026-2332","cwe":"CWE-444","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-2332","date":"2026-10-08","epss":0.01305,"percentile":0.69668}],"urls":["https://github.com/jetty/jetty.project/security/advisories/GHSA-355h-qmc2-wpwf","https://gitlab.eclipse.org/security/cve-assignment/-/issues/89","https://access.redhat.com/errata/RHSA-2026:10175","https://access.redhat.com/errata/RHSA-2026:14272","https://access.redhat.com/errata/RHSA-2026:17668","https://access.redhat.com/errata/RHSA-2026:20568","https://access.redhat.com/errata/RHSA-2026:21773","https://access.redhat.com/errata/RHSA-2026:22453","https://access.redhat.com/errata/RHSA-2026:25089","https://access.redhat.com/errata/RHSA-2026:50221","https://access.redhat.com/errata/RHSA-2026:50222","https://access.redhat.com/errata/RHSA-2026:50223","https://access.redhat.com/errata/RHSA-2026:50263","https://access.redhat.com/errata/RHSA-2026:60239","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60259","https://access.redhat.com/security/cve/CVE-2026-2332","https://bugzilla.redhat.com/show_bug.cgi?id=2458187","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2332.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-2332","description":"In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the \"funky chunks\" techniques outlined here:\n  *  https://w4ke.info/2025/06/18/funky-chunks.html\n\n  *  https://w4ke.info/2025/10/29/funky-chunks-2.html\n\n\nJetty terminates chunk extension parsing at \\r\\n inside quoted strings instead of treating this as an error.\n\n\n\n\nPOST / HTTP/1.1\nHost: localhost\nTransfer-Encoding: chunked\n\n1;ext=\"val\nX\n0\n\nGET /smuggled HTTP/1.1\n...\n\n\n\n\n\nNote how the chunk extension does not close the double quotes, and it is able to inject a smuggled request."}]},{"artifact":{"id":"a06dc8850c1b1b35","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.10-2\\+deb11u5:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.7&upstream=expat","type":"deb","version":"2.2.10-2+deb11u5","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2013-0340","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"expat","version":"2.2.10-2+deb11u5"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2013-0340","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2013-0340","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2013-0340","date":"2026-10-08","epss":0.19433,"percentile":0.97303}],"risk":0.9716500000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2013-0340","description":"expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue.  NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE."},"relatedVulnerabilities":[{"id":"CVE-2013-0340","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2013-0340","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2013-0340","date":"2026-10-08","epss":0.19433,"percentile":0.97303}],"urls":["http://openwall.com/lists/oss-security/2013/02/22/3","http://seclists.org/fulldisclosure/2021/Oct/61","http://seclists.org/fulldisclosure/2021/Oct/62","http://seclists.org/fulldisclosure/2021/Oct/63","http://seclists.org/fulldisclosure/2021/Sep/33","http://seclists.org/fulldisclosure/2021/Sep/34","http://seclists.org/fulldisclosure/2021/Sep/35","http://seclists.org/fulldisclosure/2021/Sep/38","http://seclists.org/fulldisclosure/2021/Sep/39","http://seclists.org/fulldisclosure/2021/Sep/40","http://securitytracker.com/id?1028213","http://www.openwall.com/lists/oss-security/2013/04/12/6","http://www.openwall.com/lists/oss-security/2021/10/07/4","http://www.osvdb.org/90634","http://www.securityfocus.com/bid/58233","https://github.com/libexpat/libexpat/blob/R_2_4_1/expat/Changes","https://lists.apache.org/thread.html/r41eca5f4f09e74436cbb05dec450fc2bef37b5d3e966aa7cc5fada6d%40%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/rfb2c193360436e230b85547e85a41bea0916916f96c501f5b6fc4702%40%3Cusers.openoffice.apache.org%3E","https://security.gentoo.org/glsa/201701-21","https://support.apple.com/kb/HT212804","https://support.apple.com/kb/HT212805","https://support.apple.com/kb/HT212807","https://support.apple.com/kb/HT212814","https://support.apple.com/kb/HT212815","https://support.apple.com/kb/HT212819"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2013-0340","description":"expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue.  NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u11"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-46218","versionConstraint":"< 7.74.0-1.3+deb11u11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-46218","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u11"],"available":[{"date":"2023-12-23","kind":"advisory","version":"7.74.0-1.3+deb11u11"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46218","cwe":"CWE-178","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-46218","date":"2026-10-08","epss":0.01685,"percentile":0.76307}],"risk":0.9688749999999999,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5587-1","link":"https://security-tracker.debian.org/tracker/DSA-5587-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-46218","description":"This flaw allows a malicious HTTP server to set \"super cookies\" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains.  It could do this by exploiting a mixed case flaw in curl's function that verifies a given cookie domain against the Public Suffix List (PSL). For example a cookie could be set with `domain=co.UK` when the URL used a lower case hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain."},"relatedVulnerabilities":[{"id":"CVE-2023-46218","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46218","cwe":"CWE-178","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-46218","date":"2026-10-08","epss":0.01685,"percentile":0.76307}],"urls":["https://curl.se/docs/CVE-2023-46218.html","https://hackerone.com/reports/2212193","https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/","https://security.netapp.com/advisory/ntap-20240125-0007/","https://www.debian.org/security/2023/dsa-5587","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://curl.se/docs/CVE-2023-46218.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-46218","description":"This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-46218","versionConstraint":"< 7.74.0-1.3+deb11u11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-46218","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u11"],"available":[{"date":"2023-12-23","kind":"advisory","version":"7.74.0-1.3+deb11u11"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46218","cwe":"CWE-178","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-46218","date":"2026-10-08","epss":0.01685,"percentile":0.76307}],"risk":0.9688749999999999,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5587-1","link":"https://security-tracker.debian.org/tracker/DSA-5587-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-46218","description":"This flaw allows a malicious HTTP server to set \"super cookies\" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains.  It could do this by exploiting a mixed case flaw in curl's function that verifies a given cookie domain against the Public Suffix List (PSL). For example a cookie could be set with `domain=co.UK` when the URL used a lower case hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain."},"relatedVulnerabilities":[{"id":"CVE-2023-46218","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46218","cwe":"CWE-178","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-46218","date":"2026-10-08","epss":0.01685,"percentile":0.76307}],"urls":["https://curl.se/docs/CVE-2023-46218.html","https://hackerone.com/reports/2212193","https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/","https://security.netapp.com/advisory/ntap-20240125-0007/","https://www.debian.org/security/2023/dsa-5587","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://curl.se/docs/CVE-2023-46218.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-46218","description":"This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-46218","versionConstraint":"< 7.74.0-1.3+deb11u11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-46218","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u11"],"available":[{"date":"2023-12-23","kind":"advisory","version":"7.74.0-1.3+deb11u11"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46218","cwe":"CWE-178","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-46218","date":"2026-10-08","epss":0.01685,"percentile":0.76307}],"risk":0.9688749999999999,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5587-1","link":"https://security-tracker.debian.org/tracker/DSA-5587-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-46218","description":"This flaw allows a malicious HTTP server to set \"super cookies\" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains.  It could do this by exploiting a mixed case flaw in curl's function that verifies a given cookie domain against the Public Suffix List (PSL). For example a cookie could be set with `domain=co.UK` when the URL used a lower case hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain."},"relatedVulnerabilities":[{"id":"CVE-2023-46218","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46218","cwe":"CWE-178","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-46218","date":"2026-10-08","epss":0.01685,"percentile":0.76307}],"urls":["https://curl.se/docs/CVE-2023-46218.html","https://hackerone.com/reports/2212193","https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/","https://security.netapp.com/advisory/ntap-20240125-0007/","https://www.debian.org/security/2023/dsa-5587","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://curl.se/docs/CVE-2023-46218.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-46218","description":"This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain."}]},{"artifact":{"id":"29f75eac1d5f2b35","cpes":["cpe:2.3:a:org.codehaus.jettison.jettison:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:org.codehaus.jettison:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:org.codehaus:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:codehaus:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:jettison:jettison:1.3.7:*:*:*:*:*:*:*"],"name":"jettison","purl":"pkg:maven/org.codehaus.jettison/jettison@1.3.7","type":"java-archive","version":"1.3.7","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"org.codehaus.jettison","virtualPath":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi:WEB-INF/lib/jettison-1.3.7.jar","manifestName":"","pomArtifactID":"jettison","archiveDigests":[{"value":"7d36a59a0577f11b12088b9e215d6860345b9e1d","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi:WEB-INF/lib/jettison-1.3.7.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.5.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-56h3-78gp-v83r","versionConstraint":"<1.5.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.codehaus.jettison:jettison","version":"1.3.7"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-56h3-78gp-v83r","fix":{"state":"fixed","versions":["1.5.1"],"available":[{"date":"2022-10-19","kind":"first-observed","version":"1.5.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40149","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-40149","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-40149","date":"2026-10-08","epss":0.01677,"percentile":0.76177}],"risk":0.9642749999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-40149","https://github.com/jettison-json/jettison/issues/45","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46538","https://github.com/jettison-json/jettison/pull/49/files","https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1","https://lists.debian.org/debian-lts-announce/2022/11/msg00011.html","https://www.debian.org/security/2023/dsa-5312"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-56h3-78gp-v83r","description":"Jettison parser crash by stackoverflow"},"relatedVulnerabilities":[{"id":"CVE-2022-40149","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40149","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-40149","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-40149","date":"2026-10-08","epss":0.01677,"percentile":0.76177}],"urls":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46538","https://github.com/jettison-json/jettison/issues/45","https://lists.debian.org/debian-lts-announce/2022/11/msg00011.html","https://www.debian.org/security/2023/dsa-5312"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-40149","description":"Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2022-1143","versionConstraint":"<1.18.9||>=1.19.0-0,<1.19.4 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2022-1143","fix":{"state":"fixed","versions":["1.18.9","1.19.4"],"available":[{"date":"2022-12-06","kind":"release","version":"1.18.9"},{"date":"2022-12-06","kind":"release","version":"1.19.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41720","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41720","date":"2026-10-08","epss":0.01279,"percentile":0.69124}],"risk":0.95925,"urls":["https://go.dev/cl/455716","https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/56694","description":"On Windows, restricted files can be accessed via os.DirFS and http.Dir.\n\nThe os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS(\"C:/tmp\").Open(\"COM1\") opens the COM1 device. Both os.DirFS and http.Dir only provide read-only filesystem access.\n\nIn addition, on Windows, an os.DirFS for the directory (the root of the current drive) can permit a maliciously crafted path to escape from the drive and access any path on the system.\n\nWith fix applied, the behavior of os.DirFS(\"\") has changed. Previously, an empty root was treated equivalently to \"/\", so os.DirFS(\"\").Open(\"tmp\") would open the path \"/tmp\". This now returns an error."},"relatedVulnerabilities":[{"id":"CVE-2022-41720","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41720","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41720","date":"2026-10-08","epss":0.01279,"percentile":0.69124}],"urls":["https://go.dev/cl/455716","https://go.dev/issue/56694","https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJ","https://pkg.go.dev/vuln/GO-2022-1143"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41720","description":"On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS(\"C:/tmp\").Open(\"COM1\") opens the COM1 device. Both os.DirFS and http.Dir only provide read-only filesystem access. In addition, on Windows, an os.DirFS for the directory (the root of the current drive) can permit a maliciously crafted path to escape from the drive and access any path on the system. With fix applied, the behavior of os.DirFS(\"\") has changed. Previously, an empty root was treated equivalently to \"/\", so os.DirFS(\"\").Open(\"tmp\") would open the path \"/tmp\". This now returns an error."}]},{"artifact":{"id":"f794937746a06306","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.4.2:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2","type":"java-archive","version":"2.13.4.2","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jackson2-api.hpi:WEB-INF/lib/jackson-databind-2.13.4.2.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"325c06bdfeb628cfb80ebaaf1a26cc1eb558a585","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jackson2-api.hpi:WEB-INF/lib/jackson-databind-2.13.4.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rmj7-2vxq-3g9f","versionConstraint":">=2.10.0,<2.18.8 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.13.4.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-rmj7-2vxq-3g9f","fix":{"state":"fixed","versions":["2.18.8"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.18.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-54513","date":"2026-10-08","epss":0.01226,"percentile":0.67932}],"risk":0.95628,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","https://github.com/FasterXML/jackson-databind/issues/5981","https://github.com/FasterXML/jackson-databind/issues/5983","https://github.com/FasterXML/jackson-databind/pull/5984","https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","https://nvd.nist.gov/vuln/detail/CVE-2026-54513","https://access.redhat.com/errata/RHSA-2026:36839","https://access.redhat.com/errata/RHSA-2026:40895","https://access.redhat.com/security/cve/CVE-2026-54513","https://bugzilla.redhat.com/show_bug.cgi?id=2492010","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json","https://access.redhat.com/errata/RHSA-2026:41951","https://access.redhat.com/errata/RHSA-2026:43218","https://access.redhat.com/errata/RHSA-2026:44271","https://access.redhat.com/errata/RHSA-2026:44066","https://access.redhat.com/errata/RHSA-2026:44065","https://access.redhat.com/errata/RHSA-2026:44064","https://access.redhat.com/errata/RHSA-2026:44063","https://access.redhat.com/errata/RHSA-2026:44062","https://access.redhat.com/errata/RHSA-2026:44061","https://access.redhat.com/errata/RHSA-2026:43400","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:48095","https://access.redhat.com/errata/RHSA-2026:50849","https://access.redhat.com/errata/RHSA-2026:50848","https://access.redhat.com/errata/RHSA-2026:50847","https://access.redhat.com/errata/RHSA-2026:50846","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54622","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:66488","https://access.redhat.com/errata/RHSA-2026:66545"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rmj7-2vxq-3g9f","description":"jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)"},"relatedVulnerabilities":[{"id":"CVE-2026-54513","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-54513","date":"2026-10-08","epss":0.01226,"percentile":0.67932}],"urls":["https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","https://github.com/FasterXML/jackson-databind/issues/5981","https://github.com/FasterXML/jackson-databind/issues/5983","https://github.com/FasterXML/jackson-databind/pull/5984","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","https://access.redhat.com/errata/RHSA-2026:36839","https://access.redhat.com/errata/RHSA-2026:40895","https://access.redhat.com/errata/RHSA-2026:41951","https://access.redhat.com/errata/RHSA-2026:43218","https://access.redhat.com/errata/RHSA-2026:43400","https://access.redhat.com/errata/RHSA-2026:44061","https://access.redhat.com/errata/RHSA-2026:44062","https://access.redhat.com/errata/RHSA-2026:44063","https://access.redhat.com/errata/RHSA-2026:44064","https://access.redhat.com/errata/RHSA-2026:44065","https://access.redhat.com/errata/RHSA-2026:44066","https://access.redhat.com/errata/RHSA-2026:44271","https://access.redhat.com/errata/RHSA-2026:48095","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:50846","https://access.redhat.com/errata/RHSA-2026:50847","https://access.redhat.com/errata/RHSA-2026:50848","https://access.redhat.com/errata/RHSA-2026:50849","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54622","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:66488","https://access.redhat.com/errata/RHSA-2026:66545","https://access.redhat.com/security/cve/CVE-2026-54513","https://bugzilla.redhat.com/show_bug.cgi?id=2492010","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54513","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() allowlists any array type based only on clazz.isArray(), without validating the array's component (element) type against the configured allowlist. A PTV built with allowIfSubTypeIsArray() plus an explicit concrete-type allowlist therefore still permits EvilType[] even though EvilType is not allowlisted. When Jackson deserializes the elements and no per-element type IDs are present, it instantiates the component type directly with no further PTV check, bypassing the allowlist. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4."}]},{"artifact":{"id":"54929a019a4be8e5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.14.2:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2","type":"java-archive","version":"2.14.2","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:28ce38a426e8c5f4d5c1503345486bf2d71355572ce12a34d66ff30128719565","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rmj7-2vxq-3g9f","versionConstraint":">=2.10.0,<2.18.8 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.14.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-rmj7-2vxq-3g9f","fix":{"state":"fixed","versions":["2.18.8"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.18.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-54513","date":"2026-10-08","epss":0.01226,"percentile":0.67932}],"risk":0.95628,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","https://github.com/FasterXML/jackson-databind/issues/5981","https://github.com/FasterXML/jackson-databind/issues/5983","https://github.com/FasterXML/jackson-databind/pull/5984","https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","https://nvd.nist.gov/vuln/detail/CVE-2026-54513","https://access.redhat.com/errata/RHSA-2026:36839","https://access.redhat.com/errata/RHSA-2026:40895","https://access.redhat.com/security/cve/CVE-2026-54513","https://bugzilla.redhat.com/show_bug.cgi?id=2492010","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json","https://access.redhat.com/errata/RHSA-2026:41951","https://access.redhat.com/errata/RHSA-2026:43218","https://access.redhat.com/errata/RHSA-2026:44271","https://access.redhat.com/errata/RHSA-2026:44066","https://access.redhat.com/errata/RHSA-2026:44065","https://access.redhat.com/errata/RHSA-2026:44064","https://access.redhat.com/errata/RHSA-2026:44063","https://access.redhat.com/errata/RHSA-2026:44062","https://access.redhat.com/errata/RHSA-2026:44061","https://access.redhat.com/errata/RHSA-2026:43400","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:48095","https://access.redhat.com/errata/RHSA-2026:50849","https://access.redhat.com/errata/RHSA-2026:50848","https://access.redhat.com/errata/RHSA-2026:50847","https://access.redhat.com/errata/RHSA-2026:50846","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54622","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:66488","https://access.redhat.com/errata/RHSA-2026:66545"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rmj7-2vxq-3g9f","description":"jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)"},"relatedVulnerabilities":[{"id":"CVE-2026-54513","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-54513","date":"2026-10-08","epss":0.01226,"percentile":0.67932}],"urls":["https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","https://github.com/FasterXML/jackson-databind/issues/5981","https://github.com/FasterXML/jackson-databind/issues/5983","https://github.com/FasterXML/jackson-databind/pull/5984","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","https://access.redhat.com/errata/RHSA-2026:36839","https://access.redhat.com/errata/RHSA-2026:40895","https://access.redhat.com/errata/RHSA-2026:41951","https://access.redhat.com/errata/RHSA-2026:43218","https://access.redhat.com/errata/RHSA-2026:43400","https://access.redhat.com/errata/RHSA-2026:44061","https://access.redhat.com/errata/RHSA-2026:44062","https://access.redhat.com/errata/RHSA-2026:44063","https://access.redhat.com/errata/RHSA-2026:44064","https://access.redhat.com/errata/RHSA-2026:44065","https://access.redhat.com/errata/RHSA-2026:44066","https://access.redhat.com/errata/RHSA-2026:44271","https://access.redhat.com/errata/RHSA-2026:48095","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:50846","https://access.redhat.com/errata/RHSA-2026:50847","https://access.redhat.com/errata/RHSA-2026:50848","https://access.redhat.com/errata/RHSA-2026:50849","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54622","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:66488","https://access.redhat.com/errata/RHSA-2026:66545","https://access.redhat.com/security/cve/CVE-2026-54513","https://bugzilla.redhat.com/show_bug.cgi?id=2492010","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54513","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() allowlists any array type based only on clazz.isArray(), without validating the array's component (element) type against the configured allowlist. A PTV built with allowIfSubTypeIsArray() plus an explicit concrete-type allowlist therefore still permits EvilType[] even though EvilType is not allowlisted. When Jackson deserializes the elements and no per-element type IDs are present, it instantiates the component type directly with no further PTV check, bypassing the allowlist. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4."}]},{"artifact":{"id":"9bd5c64d00066e09","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.15.2:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2","type":"java-archive","version":"2.15.2","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/share/jenkins/ref/plugins/jackson2-api.jpi:WEB-INF/lib/jackson-databind-2.15.2.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"9353b021f10c307c00328f52090de2bdb4b6ff9c","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/jackson2-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/jackson2-api.jpi:WEB-INF/lib/jackson-databind-2.15.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rmj7-2vxq-3g9f","versionConstraint":">=2.10.0,<2.18.8 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.15.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-rmj7-2vxq-3g9f","fix":{"state":"fixed","versions":["2.18.8"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.18.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-54513","date":"2026-10-08","epss":0.01226,"percentile":0.67932}],"risk":0.95628,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","https://github.com/FasterXML/jackson-databind/issues/5981","https://github.com/FasterXML/jackson-databind/issues/5983","https://github.com/FasterXML/jackson-databind/pull/5984","https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","https://nvd.nist.gov/vuln/detail/CVE-2026-54513","https://access.redhat.com/errata/RHSA-2026:36839","https://access.redhat.com/errata/RHSA-2026:40895","https://access.redhat.com/security/cve/CVE-2026-54513","https://bugzilla.redhat.com/show_bug.cgi?id=2492010","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json","https://access.redhat.com/errata/RHSA-2026:41951","https://access.redhat.com/errata/RHSA-2026:43218","https://access.redhat.com/errata/RHSA-2026:44271","https://access.redhat.com/errata/RHSA-2026:44066","https://access.redhat.com/errata/RHSA-2026:44065","https://access.redhat.com/errata/RHSA-2026:44064","https://access.redhat.com/errata/RHSA-2026:44063","https://access.redhat.com/errata/RHSA-2026:44062","https://access.redhat.com/errata/RHSA-2026:44061","https://access.redhat.com/errata/RHSA-2026:43400","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:48095","https://access.redhat.com/errata/RHSA-2026:50849","https://access.redhat.com/errata/RHSA-2026:50848","https://access.redhat.com/errata/RHSA-2026:50847","https://access.redhat.com/errata/RHSA-2026:50846","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54622","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:66488","https://access.redhat.com/errata/RHSA-2026:66545"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rmj7-2vxq-3g9f","description":"jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)"},"relatedVulnerabilities":[{"id":"CVE-2026-54513","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-54513","date":"2026-10-08","epss":0.01226,"percentile":0.67932}],"urls":["https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","https://github.com/FasterXML/jackson-databind/issues/5981","https://github.com/FasterXML/jackson-databind/issues/5983","https://github.com/FasterXML/jackson-databind/pull/5984","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","https://access.redhat.com/errata/RHSA-2026:36839","https://access.redhat.com/errata/RHSA-2026:40895","https://access.redhat.com/errata/RHSA-2026:41951","https://access.redhat.com/errata/RHSA-2026:43218","https://access.redhat.com/errata/RHSA-2026:43400","https://access.redhat.com/errata/RHSA-2026:44061","https://access.redhat.com/errata/RHSA-2026:44062","https://access.redhat.com/errata/RHSA-2026:44063","https://access.redhat.com/errata/RHSA-2026:44064","https://access.redhat.com/errata/RHSA-2026:44065","https://access.redhat.com/errata/RHSA-2026:44066","https://access.redhat.com/errata/RHSA-2026:44271","https://access.redhat.com/errata/RHSA-2026:48095","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:50846","https://access.redhat.com/errata/RHSA-2026:50847","https://access.redhat.com/errata/RHSA-2026:50848","https://access.redhat.com/errata/RHSA-2026:50849","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54622","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:66488","https://access.redhat.com/errata/RHSA-2026:66545","https://access.redhat.com/security/cve/CVE-2026-54513","https://bugzilla.redhat.com/show_bug.cgi?id=2492010","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54513","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() allowlists any array type based only on clazz.isArray(), without validating the array's component (element) type against the configured allowlist. A PTV built with allowIfSubTypeIsArray() plus an explicit concrete-type allowlist therefore still permits EvilType[] even though EvilType is not allowlisted. When Jackson deserializes the elements and no per-element type IDs are present, it instantiates the component type directly with no further PTV check, bypassing the allowlist. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4."}]},{"artifact":{"id":"c3466eb679e28aa6","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A8.4p1-5%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=openssh","type":"deb","version":"1:8.4p1-5+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Beer-ware","Expat-with-advertising-restriction","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-client/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:8.4p1-5+deb11u6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-3497","versionConstraint":"< 1:8.4p1-5+deb11u6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssh","version":"1:8.4p1-5+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-3497","fix":{"state":"fixed","versions":["1:8.4p1-5+deb11u6"],"available":[{"date":"2026-04-17","kind":"first-observed","version":"1:8.4p1-5+deb11u6"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3497","cwe":"CWE-908","type":"Secondary","source":"security@ubuntu.com"},{"cve":"CVE-2026-3497","cwe":"CWE-824","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-3497","date":"2026-10-08","epss":0.0125,"percentile":0.68511}],"risk":0.9375000000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-3497","description":"Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration."},"relatedVulnerabilities":[{"id":"CVE-2026-3497","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@ubuntu.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3497","cwe":"CWE-908","type":"Secondary","source":"security@ubuntu.com"},{"cve":"CVE-2026-3497","cwe":"CWE-824","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-3497","date":"2026-10-08","epss":0.0125,"percentile":0.68511}],"urls":["https://ubuntu.com/security/CVE-2026-3497","https://www.openwall.com/lists/oss-security/2026/03/12/3","http://www.openwall.com/lists/oss-security/2026/03/12/3","http://www.openwall.com/lists/oss-security/2026/03/14/3","http://www.openwall.com/lists/oss-security/2026/03/14/4","http://www.openwall.com/lists/oss-security/2026/03/18/2","http://www.openwall.com/lists/oss-security/2026/03/18/4","http://www.openwall.com/lists/oss-security/2026/03/18/5","http://www.openwall.com/lists/oss-security/2026/03/18/7","https://lists.debian.org/debian-lts-announce/2026/04/msg00014.html","https://access.redhat.com/errata/RHSA-2026:10065","https://access.redhat.com/errata/RHSA-2026:10714","https://access.redhat.com/errata/RHSA-2026:12071","https://access.redhat.com/errata/RHSA-2026:13750","https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:14773","https://access.redhat.com/errata/RHSA-2026:14924","https://access.redhat.com/errata/RHSA-2026:15087","https://access.redhat.com/errata/RHSA-2026:15891","https://access.redhat.com/errata/RHSA-2026:15893","https://access.redhat.com/errata/RHSA-2026:16008","https://access.redhat.com/errata/RHSA-2026:16009","https://access.redhat.com/errata/RHSA-2026:16030","https://access.redhat.com/errata/RHSA-2026:16174","https://access.redhat.com/errata/RHSA-2026:17596","https://access.redhat.com/errata/RHSA-2026:19724","https://access.redhat.com/errata/RHSA-2026:19725","https://access.redhat.com/errata/RHSA-2026:20040","https://access.redhat.com/errata/RHSA-2026:20087","https://access.redhat.com/errata/RHSA-2026:21690","https://access.redhat.com/errata/RHSA-2026:21695","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:5475","https://access.redhat.com/errata/RHSA-2026:6461","https://access.redhat.com/errata/RHSA-2026:6462","https://access.redhat.com/errata/RHSA-2026:6463","https://access.redhat.com/errata/RHSA-2026:7107","https://access.redhat.com/errata/RHSA-2026:9415","https://access.redhat.com/errata/RHSA-2026:9732","https://access.redhat.com/security/cve/CVE-2026-3497","https://bugzilla.redhat.com/show_bug.cgi?id=2447085","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3497.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3497","description":"Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.20.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-2375","versionConstraint":"<1.20.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-2375","fix":{"state":"fixed","versions":["1.20.0"],"available":[{"date":"2023-02-01","kind":"release","version":"1.20.0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45287","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-45287","date":"2026-10-08","epss":0.0125,"percentile":0.68497}],"risk":0.9375000000000001,"urls":["https://go.dev/cl/326012/26","https://groups.google.com/g/golang-announce/c/QMK8IQALDvA","https://people.redhat.com/~hkario/marvin/"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/20654","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits.\n\nIn Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels."},"relatedVulnerabilities":[{"id":"CVE-2023-45287","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45287","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-45287","date":"2026-10-08","epss":0.0125,"percentile":0.68497}],"urls":["https://go.dev/cl/326012/26","https://go.dev/issue/20654","https://groups.google.com/g/golang-announce/c/QMK8IQALDvA","https://people.redhat.com/~hkario/marvin/","https://pkg.go.dev/vuln/GO-2023-2375","https://security.netapp.com/advisory/ntap-20240112-0005/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-45287","description":"Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was applied to prevent timing attacks, but analysis shows this may not have been fully effective. In particular it appears as if the removal of PKCS#1 padding may leak timing information, which in turn could be used to recover session key bits. In Go 1.20, the crypto/tls library switched to a fully constant time RSA implementation, which we do not believe exhibits any timing side channels."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1569","versionConstraint":"<1.19.6||>=1.20.0-0,<1.20.1 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1569","fix":{"state":"fixed","versions":["1.19.6","1.20.1"],"available":[{"date":"2023-02-14","kind":"release","version":"1.19.6"},{"date":"2023-02-14","kind":"release","version":"1.20.1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41725","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41725","date":"2026-10-08","epss":0.01241,"percentile":0.68283}],"risk":0.93075,"urls":["https://go.dev/cl/468124","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/58006","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart.\n\nMultipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue.\n\nReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files.\n\nWith fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous.\n\nIn addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct.\n\nUsers should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader."},"relatedVulnerabilities":[{"id":"CVE-2022-41725","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41725","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41725","date":"2026-10-08","epss":0.01241,"percentile":0.68283}],"urls":["https://go.dev/cl/468124","https://go.dev/issue/58006","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E","https://pkg.go.dev/vuln/GO-2023-1569","https://security.gentoo.org/glsa/202311-09"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41725","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader."}]},{"artifact":{"id":"21eba376b06d560f","cpes":["cpe:2.3:a:org.springframework:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring_web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-web:5.3.27:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_web:5.3.27:*:*:*:*:*:*:*"],"name":"spring-web","purl":"pkg:maven/org.springframework/spring-web@5.3.27","type":"java-archive","version":"5.3.27","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-web-5.3.27.jar","manifestName":"","pomArtifactID":"spring-web","archiveDigests":[{"value":"a51c45a8602052a2a90f7e645a47ba8df1547795","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-web-5.3.27.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.3.34"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2wrp-6fg6-hmc5","versionConstraint":"<5.3.34 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-web","version":"5.3.27"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-2wrp-6fg6-hmc5","fix":{"state":"fixed","versions":["5.3.34"],"available":[{"date":"2024-04-26","kind":"first-observed","version":"5.3.34"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22262","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-22262","cwe":"CWE-918","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22262","date":"2026-10-08","epss":0.01191,"percentile":0.67043}],"risk":0.9289800000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-22262","https://spring.io/security/cve-2024-22262","https://github.com/spring-projects/spring-framework/blob/main/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java","https://security.netapp.com/advisory/ntap-20240524-0003"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2wrp-6fg6-hmc5","description":"Spring Framework URL Parsing with Host Validation"},"relatedVulnerabilities":[{"id":"CVE-2024-22262","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22262","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-22262","cwe":"CWE-918","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22262","date":"2026-10-08","epss":0.01191,"percentile":0.67043}],"urls":["https://security.netapp.com/advisory/ntap-20240524-0003/","https://spring.io/security/cve-2024-22262"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22262","description":"Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259  and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input."}]},{"artifact":{"id":"255a953ed0498414","cpes":["cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-0:3.34.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_0:3.34.1-3:*:*:*:*:*:*:*"],"name":"libsqlite3-0","purl":"pkg:deb/debian/libsqlite3-0@3.34.1-3?arch=amd64&distro=debian-11.7&upstream=sqlite3","type":"deb","version":"3.34.1-3","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-0/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libsqlite3-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.34.1-3+deb11u1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-7104","versionConstraint":"< 3.34.1-3+deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"sqlite3","version":"3.34.1-3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-7104","fix":{"state":"fixed","versions":["3.34.1-3+deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"3.34.1-3+deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-7104","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2023-7104","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-7104","date":"2026-10-08","epss":0.01249,"percentile":0.68483}],"risk":0.92426,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-7104","description":"A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999."},"relatedVulnerabilities":[{"id":"CVE-2023-7104","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.5,"impactScore":3.4,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":5.2,"impactScore":6.5,"exploitabilityScore":5.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-7104","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2023-7104","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-7104","date":"2026-10-08","epss":0.01249,"percentile":0.68483}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/","https://security.netapp.com/advisory/ntap-20240112-0008/","https://sqlite.org/forum/forumpost/5bcbf4571c","https://sqlite.org/src/info/0e4e7a05c4204b47","https://vuldb.com/?ctiid.248999","https://vuldb.com/?id.248999","https://lists.debian.org/debian-lts-announce/2024/09/msg00050.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-7104","description":"A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.28"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-30749","versionConstraint":"< 1.8.0_462||>= 1.9, < 8.0.462||>= 12, < 17.0.16||>= 18, < 21.0.8||>= 22, < 24.0.2||>= 9, < 11.0.28 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-30749","fix":{"state":"fixed","versions":["1.8.0_462","8.0.462","11.0.28","17.0.16","21.0.8","24.0.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_462"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.462"},{"date":"2025-09-04","kind":"first-observed","version":"17.0.16"},{"date":"2025-09-04","kind":"first-observed","version":"21.0.8"},{"date":"2025-09-04","kind":"first-observed","version":"24.0.2"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.28"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-30749","date":"2026-10-08","epss":0.01183,"percentile":0.66835}],"risk":0.92274,"urls":["https://www.oracle.com/security-alerts/cpujul2025.html","https://lists.debian.org/debian-lts-announce/2025/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00014.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-30749","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."},"relatedVulnerabilities":[]},{"artifact":{"id":"7e630e3851da5911","cpes":["cpe:2.3:a:org.sonatype.oss:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:org.json:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:sonatype:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:json:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:oss:json:20190722:*:*:*:*:*:*:*"],"name":"json","purl":"pkg:maven/org.json/json@20190722","type":"java-archive","version":"20190722","language":"java","licenses":["http://json.org/license.html"],"metadata":{"pomGroupID":"org.json","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jackson2-api.hpi:WEB-INF/lib/json-20190722.jar","manifestName":"","pomArtifactID":"json","archiveDigests":[{"value":"07bce7bacf0ab5e9f894d307a3de8b7f540064d5","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jackson2-api.hpi:WEB-INF/lib/json-20190722.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"20230227"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3vqj-43w4-2q58","versionConstraint":"<20230227 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.json:json","version":"20190722"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-3vqj-43w4-2q58","fix":{"state":"fixed","versions":["20230227"],"available":[{"date":"2023-04-15","kind":"first-observed","version":"20230227"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45688","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45688","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45688","date":"2026-10-08","epss":0.01215,"percentile":0.67657}],"risk":0.9112499999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-45688","https://github.com/dromara/hutool/issues/2748","https://github.com/stleary/JSON-java/issues/708","https://github.com/stleary/JSON-java/commit/a6e412bded7a0ad605adfeca029318f184c32102","https://github.com/dromara/hutool/commit/6a2b585de0a380e8c12016dbaa1620b69be11b8c","https://github.com/dromara/hutool/releases/tag/5.8.25"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3vqj-43w4-2q58","description":"json stack overflow vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2022-45688","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45688","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45688","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45688","date":"2026-10-08","epss":0.01215,"percentile":0.67657}],"urls":["https://github.com/dromara/hutool/issues/2748","https://github.com/stleary/JSON-java/issues/708"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-45688","description":"A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data."}]},{"artifact":{"id":"42e9d263d6d418ac","cpes":["cpe:2.3:a:org.sonatype.oss:json:20220924:*:*:*:*:*:*:*","cpe:2.3:a:org.json:json:20220924:*:*:*:*:*:*:*","cpe:2.3:a:sonatype:json:20220924:*:*:*:*:*:*:*","cpe:2.3:a:json:json:20220924:*:*:*:*:*:*:*","cpe:2.3:a:oss:json:20220924:*:*:*:*:*:*:*"],"name":"json","purl":"pkg:maven/org.json/json@20220924","type":"java-archive","version":"20220924","language":"java","licenses":["Public Domain"],"metadata":{"pomGroupID":"org.json","virtualPath":"/opt/jenkins-plugin-manager.jar:org.json:json","manifestName":"","pomArtifactID":"json","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:28ce38a426e8c5f4d5c1503345486bf2d71355572ce12a34d66ff30128719565","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"20230227"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3vqj-43w4-2q58","versionConstraint":"<20230227 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.json:json","version":"20220924"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-3vqj-43w4-2q58","fix":{"state":"fixed","versions":["20230227"],"available":[{"date":"2023-04-15","kind":"first-observed","version":"20230227"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45688","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45688","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45688","date":"2026-10-08","epss":0.01215,"percentile":0.67657}],"risk":0.9112499999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-45688","https://github.com/dromara/hutool/issues/2748","https://github.com/stleary/JSON-java/issues/708","https://github.com/stleary/JSON-java/commit/a6e412bded7a0ad605adfeca029318f184c32102","https://github.com/dromara/hutool/commit/6a2b585de0a380e8c12016dbaa1620b69be11b8c","https://github.com/dromara/hutool/releases/tag/5.8.25"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3vqj-43w4-2q58","description":"json stack overflow vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2022-45688","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45688","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45688","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45688","date":"2026-10-08","epss":0.01215,"percentile":0.67657}],"urls":["https://github.com/dromara/hutool/issues/2748","https://github.com/stleary/JSON-java/issues/708"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-45688","description":"A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data."}]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42010","versionConstraint":"< 3.7.1-5+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-42010","fix":{"state":"fixed","versions":["3.7.1-5+deb11u10"],"available":[{"date":"2026-05-23","kind":"first-observed","version":"3.7.1-5+deb11u10"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42010","cwe":"CWE-170","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-42010","cwe":"CWE-626","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-42010","cwe":"CWE-170","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42010","date":"2026-10-08","epss":0.00944,"percentile":0.59864}],"risk":0.88736,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-42010","description":"A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process."},"relatedVulnerabilities":[{"id":"CVE-2026-42010","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42010","cwe":"CWE-170","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-42010","cwe":"CWE-626","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-42010","cwe":"CWE-170","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42010","date":"2026-10-08","epss":0.00944,"percentile":0.59864}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:34764","https://access.redhat.com/errata/RHSA-2026:34788","https://access.redhat.com/errata/RHSA-2026:34790","https://access.redhat.com/errata/RHSA-2026:36004","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:62409","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:67857","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-42010","https://bugzilla.redhat.com/show_bug.cgi?id=2467289","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42010.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42010","description":"A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process."}]},{"artifact":{"id":"35529043948e0377","cpes":["cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1-6:libtasn1_6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1-6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1_6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1-6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1_6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*"],"name":"libtasn1-6","purl":"pkg:deb/debian/libtasn1-6@4.16.0-2%2Bdeb11u1?arch=amd64&distro=debian-11.7","type":"deb","version":"4.16.0-2+deb11u1","language":"","licenses":["sha256:ab2f3532a1bf45d90643e92c1dfb985982698ecbf63f12595acfd9598d36350d"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtasn1-6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libtasn1-6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-13151","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"libtasn1-6","version":"4.16.0-2+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-13151","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13151","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-13151","date":"2026-10-08","epss":0.01175,"percentile":0.66615}],"risk":0.8812500000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-13151","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string."},"relatedVulnerabilities":[{"id":"CVE-2025-13151","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13151","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-13151","date":"2026-10-08","epss":0.01175,"percentile":0.66615}],"urls":["https://gitlab.com/gnutls/libtasn1","https://gitlab.com/gnutls/libtasn1/-/merge_requests/121","http://www.openwall.com/lists/oss-security/2026/01/08/5","https://www.kb.cert.org/vuls/id/271649"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-13151","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.12"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-0938","versionConstraint":"< 3.9.22||>= 3.10.0, < 3.10.17||>= 3.11.0, < 3.11.12||>= 3.12.0, < 3.12.9||>= 3.13.0, < 3.13.2||>= 3.14.0a1, < 3.14.0a5 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.12"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-0938","versionConstraint":"< 3.9.22||>= 3.10.0, < 3.10.17||>= 3.11.0, < 3.11.12||>= 3.12.0, < 3.12.9||>= 3.13.0, < 3.13.2||>= 3.14.0a1, < 3.14.0a5 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-0938","fix":{"state":"fixed","versions":["3.9.22","3.10.17","3.11.12","3.12.9","3.13.2","3.14.0a5"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.22"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.17"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.9"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.2"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0a5"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.22"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.17"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.12"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.9"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.2"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0a5"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-0938","cwe":"CWE-20","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-0938","date":"2026-10-08","epss":0.01556,"percentile":0.74418}],"risk":0.8791399999999999,"urls":["https://github.com/python/cpython/commit/526617ed68cde460236c973e5d0a8bad4de896ba","https://github.com/python/cpython/commit/90e526ae67b172ed7c6c56e7edad36263b0f9403","https://github.com/python/cpython/commit/a7084f6075c9595ba60119ce8c62f1496f50c568","https://github.com/python/cpython/commit/b8b4b713c5f8ec0958c7ef8d29d6711889bc94ab","https://github.com/python/cpython/commit/d89a5f6a6e65511a5f6e0618c4c30a7aa5aba56a","https://github.com/python/cpython/commit/ff4e5c25666f63544071a6b075ae8b25c98b7a32","https://github.com/python/cpython/issues/105704","https://github.com/python/cpython/pull/129418","https://mail.python.org/archives/list/security-announce@python.org/thread/K4EUG6EKV6JYFIC24BASYOZS4M5XOQIB/","https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html","https://security.netapp.com/advisory/ntap-20250314-0002/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-0938","description":"The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers."},"relatedVulnerabilities":[]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-27535","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27535","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27535","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27535","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27535","date":"2026-10-08","epss":0.01607,"percentile":0.75157}],"risk":0.8758150000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27535","description":"An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information."},"relatedVulnerabilities":[{"id":"CVE-2023-27535","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27535","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27535","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27535","date":"2026-10-08","epss":0.01607,"percentile":0.75157}],"urls":["https://hackerone.com/reports/1892780","https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27535","description":"An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-27535","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27535","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27535","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27535","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27535","date":"2026-10-08","epss":0.01607,"percentile":0.75157}],"risk":0.8758150000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27535","description":"An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information."},"relatedVulnerabilities":[{"id":"CVE-2023-27535","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27535","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27535","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27535","date":"2026-10-08","epss":0.01607,"percentile":0.75157}],"urls":["https://hackerone.com/reports/1892780","https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27535","description":"An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-27535","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27535","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27535","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27535","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27535","date":"2026-10-08","epss":0.01607,"percentile":0.75157}],"risk":0.8758150000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27535","description":"An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information."},"relatedVulnerabilities":[{"id":"CVE-2023-27535","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27535","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27535","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27535","date":"2026-10-08","epss":0.01607,"percentile":0.75157}],"urls":["https://hackerone.com/reports/1892780","https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27535","description":"An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information."}]},{"artifact":{"id":"b2e77aa5ecffb7d4","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4806","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-4806","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-08","epss":0.01606,"percentile":0.75144}],"risk":0.8752700000000002,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-4806","description":"A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags."},"relatedVulnerabilities":[{"id":"CVE-2023-4806","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-08","epss":0.01606,"percentile":0.75144}],"urls":["https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4806","https://bugzilla.redhat.com/show_bug.cgi?id=2237782","http://www.openwall.com/lists/oss-security/2023/10/03/4","http://www.openwall.com/lists/oss-security/2023/10/03/5","http://www.openwall.com/lists/oss-security/2023/10/03/6","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/","https://security.gentoo.org/glsa/202310-03","https://security.netapp.com/advisory/ntap-20240125-0008/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-831302.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4806","description":"A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags."}]},{"artifact":{"id":"c2e60422a6017463","cpes":["cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4806","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-4806","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-08","epss":0.01606,"percentile":0.75144}],"risk":0.8752700000000002,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-4806","description":"A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags."},"relatedVulnerabilities":[{"id":"CVE-2023-4806","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-08","epss":0.01606,"percentile":0.75144}],"urls":["https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4806","https://bugzilla.redhat.com/show_bug.cgi?id=2237782","http://www.openwall.com/lists/oss-security/2023/10/03/4","http://www.openwall.com/lists/oss-security/2023/10/03/5","http://www.openwall.com/lists/oss-security/2023/10/03/6","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/","https://security.gentoo.org/glsa/202310-03","https://security.netapp.com/advisory/ntap-20240125-0008/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-831302.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4806","description":"A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.24.13"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-4337","versionConstraint":"<1.24.13||>=1.25.0-0,<1.25.7||>=1.26.0-rc.1,<1.26.0-rc.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-4337","fix":{"state":"fixed","versions":["1.24.13","1.25.7","1.26.0-rc.3"],"available":[{"date":"2026-02-04","kind":"release","version":"1.24.13"},{"date":"2026-02-04","kind":"release","version":"1.25.7"},{"date":"2026-02-04","kind":"release","version":"1.26.0-rc.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":10,"impactScore":6.1,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-68121","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-68121","date":"2026-10-08","epss":0.00915,"percentile":0.58934}],"risk":0.8692500000000001,"urls":["https://go.dev/cl/737700","https://go.dev/issue/77217"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://groups.google.com/g/golang-announce/c/K09ubi9FQFk","description":"During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake."},"relatedVulnerabilities":[{"id":"CVE-2025-68121","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":10,"impactScore":6.1,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-68121","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-68121","date":"2026-10-08","epss":0.00915,"percentile":0.58934}],"urls":["https://go.dev/cl/737700","https://go.dev/issue/77217","https://groups.google.com/g/golang-announce/c/K09ubi9FQFk","https://pkg.go.dev/vuln/GO-2026-4337"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-68121","description":"During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-27536","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27536","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27536","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27536","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27536","date":"2026-10-08","epss":0.01566,"percentile":0.74564}],"risk":0.8534700000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27536","description":"An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed."},"relatedVulnerabilities":[{"id":"CVE-2023-27536","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27536","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27536","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27536","date":"2026-10-08","epss":0.01566,"percentile":0.74564}],"urls":["https://hackerone.com/reports/1895135","https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27536","description":"An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-27536","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27536","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27536","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27536","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27536","date":"2026-10-08","epss":0.01566,"percentile":0.74564}],"risk":0.8534700000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27536","description":"An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed."},"relatedVulnerabilities":[{"id":"CVE-2023-27536","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27536","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27536","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27536","date":"2026-10-08","epss":0.01566,"percentile":0.74564}],"urls":["https://hackerone.com/reports/1895135","https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27536","description":"An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-27536","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27536","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27536","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27536","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27536","date":"2026-10-08","epss":0.01566,"percentile":0.74564}],"risk":0.8534700000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27536","description":"An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed."},"relatedVulnerabilities":[{"id":"CVE-2023-27536","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27536","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27536","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27536","date":"2026-10-08","epss":0.01566,"percentile":0.74564}],"urls":["https://hackerone.com/reports/1895135","https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36NBD5YLJXXEDZLDGNFCERWRYJQ6LAQW/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27536","description":"An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed."}]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42009","versionConstraint":"< 3.7.1-5+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-42009","fix":{"state":"fixed","versions":["3.7.1-5+deb11u10"],"available":[{"date":"2026-05-23","kind":"first-observed","version":"3.7.1-5+deb11u10"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42009","cwe":"CWE-475","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-42009","cwe":"CWE-475","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42009","date":"2026-10-08","epss":0.01129,"percentile":0.65367}],"risk":0.8467499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-42009","description":"A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-42009","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42009","cwe":"CWE-475","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-42009","cwe":"CWE-475","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42009","date":"2026-10-08","epss":0.01129,"percentile":0.65367}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:29794","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:34372","https://access.redhat.com/errata/RHSA-2026:34764","https://access.redhat.com/errata/RHSA-2026:34788","https://access.redhat.com/errata/RHSA-2026:36004","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56786","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:56911","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-42009","https://bugzilla.redhat.com/show_bug.cgi?id=2467279","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42009.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42009","description":"A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.24"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-21147","versionConstraint":"< 1.8.0_422||>= 1.9, < 8.0.422||>= 12, < 17.0.12||>= 18, < 21.0.4||>= 22, < 22.0.2||>= 9, < 11.0.24 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-21147","fix":{"state":"fixed","versions":["1.8.0_422","8.0.422","11.0.24","17.0.12","21.0.4","22.0.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_422"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.422"},{"date":"2025-09-04","kind":"first-observed","version":"17.0.12"},{"date":"2025-09-04","kind":"first-observed","version":"21.0.4"},{"date":"2025-09-04","kind":"first-observed","version":"22.0.2"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.24"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21147","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21147","date":"2026-10-08","epss":0.01136,"percentile":0.65525}],"risk":0.8463200000000001,"urls":["https://security.netapp.com/advisory/ntap-20240719-0008/","https://www.oracle.com/security-alerts/cpujul2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-07-16"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21147","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.22.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2024-3106","versionConstraint":"<1.22.7||>=1.23.0-0,<1.23.1 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2024-3106","fix":{"state":"fixed","versions":["1.22.7","1.23.1"],"available":[{"date":"2024-09-05","kind":"release","version":"1.22.7"},{"date":"2024-09-05","kind":"release","version":"1.23.1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-34156","date":"2026-10-08","epss":0.01127,"percentile":0.65326}],"risk":0.84525,"urls":["https://go.dev/issue/69139","https://groups.google.com/g/golang-dev/c/S9POB9NCTdk"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/611239","description":"Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635."},"relatedVulnerabilities":[{"id":"CVE-2024-34156","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-34156","date":"2026-10-08","epss":0.01127,"percentile":0.65326}],"urls":["https://go.dev/cl/611239","https://go.dev/issue/69139","https://groups.google.com/g/golang-dev/c/S9POB9NCTdk","https://pkg.go.dev/vuln/GO-2024-3106","https://security.netapp.com/advisory/ntap-20240926-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34156","description":"Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635."}]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-33846","versionConstraint":"< 3.7.1-5+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-33846","fix":{"state":"fixed","versions":["3.7.1-5+deb11u10"],"available":[{"date":"2026-05-23","kind":"first-observed","version":"3.7.1-5+deb11u10"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33846","cwe":"CWE-130","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33846","cwe":"CWE-130","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33846","date":"2026-10-08","epss":0.01123,"percentile":0.65216}],"risk":0.8422499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-33846","description":"A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-33846","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33846","cwe":"CWE-130","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33846","cwe":"CWE-130","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33846","date":"2026-10-08","epss":0.01123,"percentile":0.65216}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:34372","https://access.redhat.com/errata/RHSA-2026:36004","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56786","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:56911","https://access.redhat.com/errata/RHSA-2026:57402","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-33846","https://bugzilla.redhat.com/show_bug.cgi?id=2450625","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33846.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33846","description":"A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1n-0+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-0466","versionConstraint":"< 1.1.1n-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-0466","fix":{"state":"fixed","versions":["1.1.1n-0+deb11u5"],"available":[{"date":"2023-05-31","kind":"advisory","version":"1.1.1n-0+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0466","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-0466","date":"2026-10-08","epss":0.01625,"percentile":0.75423}],"risk":0.8368750000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5417-1","link":"https://security-tracker.debian.org/tracker/DSA-5417-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-0466","description":"The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate verification.  As suddenly enabling the policy check could break existing deployments it was decided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy() function.  Instead the applications that require OpenSSL to perform certificate policy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly enable the policy check by calling X509_VERIFY_PARAM_set_flags() with the X509_V_FLAG_POLICY_CHECK flag argument.  Certificate policy checks are disabled by default in OpenSSL and are not commonly used by applications."},"relatedVulnerabilities":[{"id":"CVE-2023-0466","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0466","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-0466","date":"2026-10-08","epss":0.01625,"percentile":0.75423}],"urls":["http://www.openwall.com/lists/oss-security/2023/09/28/4","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230414-0001/","https://www.debian.org/security/2023/dsa-5417","https://www.openssl.org/news/secadv/20230328.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0466","description":"The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1n-0+deb11u5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-0466","versionConstraint":"< 1.1.1n-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-0466","fix":{"state":"fixed","versions":["1.1.1n-0+deb11u5"],"available":[{"date":"2023-05-31","kind":"advisory","version":"1.1.1n-0+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0466","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-0466","date":"2026-10-08","epss":0.01625,"percentile":0.75423}],"risk":0.8368750000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5417-1","link":"https://security-tracker.debian.org/tracker/DSA-5417-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-0466","description":"The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate verification.  As suddenly enabling the policy check could break existing deployments it was decided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy() function.  Instead the applications that require OpenSSL to perform certificate policy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly enable the policy check by calling X509_VERIFY_PARAM_set_flags() with the X509_V_FLAG_POLICY_CHECK flag argument.  Certificate policy checks are disabled by default in OpenSSL and are not commonly used by applications."},"relatedVulnerabilities":[{"id":"CVE-2023-0466","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0466","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-0466","date":"2026-10-08","epss":0.01625,"percentile":0.75423}],"urls":["http://www.openwall.com/lists/oss-security/2023/09/28/4","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230414-0001/","https://www.debian.org/security/2023/dsa-5417","https://www.openssl.org/news/secadv/20230328.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0466","description":"The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1878","versionConstraint":"<1.19.11||>=1.20.0-0,<1.20.6 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1878","fix":{"state":"fixed","versions":["1.19.11","1.20.6"],"available":[{"date":"2023-07-11","kind":"release","version":"1.19.11"},{"date":"2023-07-11","kind":"release","version":"1.20.6"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29406","cwe":"CWE-436","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29406","date":"2026-10-08","epss":0.01453,"percentile":0.72634}],"risk":0.835475,"urls":["https://go.dev/cl/506996","https://groups.google.com/g/golang-announce/c/2q13H6LEEx0"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/60374","description":"The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests.\n\nWith fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value."},"relatedVulnerabilities":[{"id":"CVE-2023-29406","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29406","cwe":"CWE-436","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29406","date":"2026-10-08","epss":0.01453,"percentile":0.72634}],"urls":["https://go.dev/cl/506996","https://go.dev/issue/60374","https://groups.google.com/g/golang-announce/c/2q13H6LEEx0","https://pkg.go.dev/vuln/GO-2023-1878","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20230814-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-29406","description":"The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1570","versionConstraint":"<1.19.6||>=1.20.0-0,<1.20.1 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1570","fix":{"state":"fixed","versions":["1.19.6","1.20.1"],"available":[{"date":"2023-02-14","kind":"release","version":"1.19.6"},{"date":"2023-02-14","kind":"release","version":"1.20.1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41724","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41724","date":"2026-10-08","epss":0.01111,"percentile":0.64924}],"risk":0.8332499999999999,"urls":["https://go.dev/cl/468125","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/58001","description":"Large handshake records may cause panics in crypto/tls.\n\nBoth clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses.\n\nThis affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert)."},"relatedVulnerabilities":[{"id":"CVE-2022-41724","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41724","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41724","date":"2026-10-08","epss":0.01111,"percentile":0.64924}],"urls":["https://go.dev/cl/468125","https://go.dev/issue/58001","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E","https://pkg.go.dev/vuln/GO-2023-1570","https://security.gentoo.org/glsa/202311-09"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41724","description":"Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert)."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.12"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1987","versionConstraint":"<1.19.12||>=1.20.0-0,<1.20.7||>=1.21.0-0,<1.21.0-rc.4 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1987","fix":{"state":"fixed","versions":["1.19.12","1.20.7","1.21.0-rc.4"],"available":[{"date":"2023-08-01","kind":"release","version":"1.19.12"},{"date":"2023-08-01","kind":"release","version":"1.20.7"},{"date":"2023-08-02","kind":"release","version":"1.21.0-rc.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29409","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29409","date":"2026-10-08","epss":0.01601,"percentile":0.75059}],"risk":0.824515,"urls":["https://go.dev/cl/515257","https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/61460","description":"Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures.\n\nWith fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits.\n\nBased on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable."},"relatedVulnerabilities":[{"id":"CVE-2023-29409","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29409","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29409","date":"2026-10-08","epss":0.01601,"percentile":0.75059}],"urls":["https://go.dev/cl/515257","https://go.dev/issue/61460","https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ","https://pkg.go.dev/vuln/GO-2023-1987","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20230831-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-29409","description":"Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable."}]},{"artifact":{"id":"7d49c34e322be875","cpes":["cpe:2.3:a:libssh2-1:libssh2-1:1.9.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libssh2-1:libssh2_1:1.9.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libssh2_1:libssh2-1:1.9.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libssh2_1:libssh2_1:1.9.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libssh2:libssh2-1:1.9.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libssh2:libssh2_1:1.9.0-2:*:*:*:*:*:*:*"],"name":"libssh2-1","purl":"pkg:deb/debian/libssh2-1@1.9.0-2?arch=amd64&distro=debian-11.7&upstream=libssh2","type":"deb","version":"1.9.0-2","language":"","licenses":["BSD3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssh2-1/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libssh2-1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssh2-1:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libssh2-1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libssh2"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.9.0-2+deb11u1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-22218","versionConstraint":"< 1.9.0-2+deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"libssh2","version":"1.9.0-2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2020-22218","fix":{"state":"fixed","versions":["1.9.0-2+deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.9.0-2+deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-22218","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-22218","date":"2026-10-08","epss":0.01099,"percentile":0.64628}],"risk":0.8242499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2020-22218","description":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory."},"relatedVulnerabilities":[{"id":"CVE-2020-22218","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-22218","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-22218","date":"2026-10-08","epss":0.01099,"percentile":0.64628}],"urls":["https://github.com/libssh2/libssh2/pull/476","https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html","https://security.netapp.com/advisory/ntap-20231006-0002/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-22218","description":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory."}]},{"artifact":{"id":"b2411ec8fb88df55","cpes":["cpe:2.3:a:jenkins:script_security:1229.v4880b_b_e905a_6:*:*:*:*:jenkins:*:*"],"name":"script-security","purl":"pkg:maven/org.jenkins-ci.plugins/script-security@1229.v4880b_b_e905a_6","type":"jenkins-plugin","version":"1229.v4880b_b_e905a_6","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi","manifestName":"","pomArtifactID":"script-security","archiveDigests":[{"value":"f5a6c17576cd9f3696165cbfaa0baed021749866","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1336.vf33a"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2g4q-9vm9-9fw4","versionConstraint":"<1336.vf33a (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:script-security","version":"1229.v4880b_b_e905a_6"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-2g4q-9vm9-9fw4","fix":{"state":"fixed","versions":["1336.vf33a"],"available":[{"date":"2024-05-04","kind":"first-observed","version":"1336.vf33a"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34145","cwe":"CWE-290","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34145","date":"2026-10-08","epss":0.01002,"percentile":0.61743}],"risk":0.81663,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-34145","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341","http://www.openwall.com/lists/oss-security/2024/05/02/3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2g4q-9vm9-9fw4","description":"Jenkins Script Security Plugin sandbox bypass vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-34145","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34145","cwe":"CWE-290","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34145","date":"2026-10-08","epss":0.01002,"percentile":0.61743}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/02/3","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34145","description":"A sandbox bypass vulnerability involving sandbox-defined classes that shadow specific non-sandbox-defined classes in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM."}]},{"artifact":{"id":"c0daed3064d1154d","cpes":["cpe:2.3:a:jenkins:script_security:1229.v4880b_b_e905a_6:*:*:*:*:jenkins:*:*"],"name":"script-security","purl":"pkg:maven/org.jenkins-ci.plugins/script-security@1229.v4880b_b_e905a_6","type":"jenkins-plugin","version":"1229.v4880b_b_e905a_6","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi:WEB-INF/lib/script-security.jar","manifestName":"","pomArtifactID":"script-security","archiveDigests":[{"value":"6d8dfb75093b8b8973af431a5fb129a91ce87525","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi:WEB-INF/lib/script-security.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1336.vf33a"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2g4q-9vm9-9fw4","versionConstraint":"<1336.vf33a (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:script-security","version":"1229.v4880b_b_e905a_6"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-2g4q-9vm9-9fw4","fix":{"state":"fixed","versions":["1336.vf33a"],"available":[{"date":"2024-05-04","kind":"first-observed","version":"1336.vf33a"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34145","cwe":"CWE-290","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34145","date":"2026-10-08","epss":0.01002,"percentile":0.61743}],"risk":0.81663,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-34145","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341","http://www.openwall.com/lists/oss-security/2024/05/02/3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2g4q-9vm9-9fw4","description":"Jenkins Script Security Plugin sandbox bypass vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-34145","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34145","cwe":"CWE-290","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34145","date":"2026-10-08","epss":0.01002,"percentile":0.61743}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/02/3","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34145","description":"A sandbox bypass vulnerability involving sandbox-defined classes that shadow specific non-sandbox-defined classes in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM."}]},{"artifact":{"id":"3c306f976d280b39","cpes":["cpe:2.3:a:jenkins:script_security:1251.vfe552ed55f8d:*:*:*:*:jenkins:*:*"],"name":"script-security","purl":"pkg:maven/org.jenkins-ci.plugins/script-security@1251.vfe552ed55f8d","type":"jenkins-plugin","version":"1251.vfe552ed55f8d","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/ref/plugins/script-security.jpi","manifestName":"","pomArtifactID":"script-security","archiveDigests":[{"value":"c8522b7ee175ee07e9b77976b7347f964421725c","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/script-security.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/script-security.jpi","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1336.vf33a"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2g4q-9vm9-9fw4","versionConstraint":"<1336.vf33a (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:script-security","version":"1251.vfe552ed55f8d"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-2g4q-9vm9-9fw4","fix":{"state":"fixed","versions":["1336.vf33a"],"available":[{"date":"2024-05-04","kind":"first-observed","version":"1336.vf33a"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34145","cwe":"CWE-290","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34145","date":"2026-10-08","epss":0.01002,"percentile":0.61743}],"risk":0.81663,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-34145","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341","http://www.openwall.com/lists/oss-security/2024/05/02/3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2g4q-9vm9-9fw4","description":"Jenkins Script Security Plugin sandbox bypass vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-34145","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34145","cwe":"CWE-290","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34145","date":"2026-10-08","epss":0.01002,"percentile":0.61743}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/02/3","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34145","description":"A sandbox bypass vulnerability involving sandbox-defined classes that shadow specific non-sandbox-defined classes in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM."}]},{"artifact":{"id":"5ed561949ce983e6","cpes":["cpe:2.3:a:jenkins:script_security:1251.vfe552ed55f8d:*:*:*:*:jenkins:*:*"],"name":"script-security","purl":"pkg:maven/org.jenkins-ci.plugins/script-security@1251.vfe552ed55f8d","type":"jenkins-plugin","version":"1251.vfe552ed55f8d","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/ref/plugins/script-security.jpi:WEB-INF/lib/script-security.jar","manifestName":"","pomArtifactID":"script-security","archiveDigests":[{"value":"6f4f72f48a7527e123dc206911afa1f7841067e6","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/script-security.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/script-security.jpi:WEB-INF/lib/script-security.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1336.vf33a"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2g4q-9vm9-9fw4","versionConstraint":"<1336.vf33a (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:script-security","version":"1251.vfe552ed55f8d"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-2g4q-9vm9-9fw4","fix":{"state":"fixed","versions":["1336.vf33a"],"available":[{"date":"2024-05-04","kind":"first-observed","version":"1336.vf33a"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34145","cwe":"CWE-290","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34145","date":"2026-10-08","epss":0.01002,"percentile":0.61743}],"risk":0.81663,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-34145","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341","http://www.openwall.com/lists/oss-security/2024/05/02/3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2g4q-9vm9-9fw4","description":"Jenkins Script Security Plugin sandbox bypass vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-34145","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34145","cwe":"CWE-290","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34145","date":"2026-10-08","epss":0.01002,"percentile":0.61743}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/02/3","https://www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3341"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34145","description":"A sandbox bypass vulnerability involving sandbox-defined classes that shadow specific non-sandbox-defined classes in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1n-0+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-0465","versionConstraint":"< 1.1.1n-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-0465","fix":{"state":"fixed","versions":["1.1.1n-0+deb11u5"],"available":[{"date":"2023-05-31","kind":"advisory","version":"1.1.1n-0+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0465","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0465","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0465","date":"2026-10-08","epss":0.01583,"percentile":0.74801}],"risk":0.815245,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5417-1","link":"https://security-tracker.debian.org/tracker/DSA-5417-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-0465","description":"Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks.  Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether.  Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function."},"relatedVulnerabilities":[{"id":"CVE-2023-0465","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0465","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0465","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0465","date":"2026-10-08","epss":0.01583,"percentile":0.74801}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230414-0001/","https://www.debian.org/security/2023/dsa-5417","https://www.openssl.org/news/secadv/20230328.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0465","description":"Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1n-0+deb11u5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-0465","versionConstraint":"< 1.1.1n-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-0465","fix":{"state":"fixed","versions":["1.1.1n-0+deb11u5"],"available":[{"date":"2023-05-31","kind":"advisory","version":"1.1.1n-0+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0465","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0465","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0465","date":"2026-10-08","epss":0.01583,"percentile":0.74801}],"risk":0.815245,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5417-1","link":"https://security-tracker.debian.org/tracker/DSA-5417-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-0465","description":"Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks.  Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether.  Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function."},"relatedVulnerabilities":[{"id":"CVE-2023-0465","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0465","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0465","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0465","date":"2026-10-08","epss":0.01583,"percentile":0.74801}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230414-0001/","https://www.debian.org/security/2023/dsa-5417","https://www.openssl.org/news/secadv/20230328.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0465","description":"Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-4032","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.4||>= 3.13.0a1, < 3.13.0a6||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-4032","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.4||>= 3.13.0a1, < 3.13.0a6||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-4032","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.4","3.13.0a6"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0a6"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0a6"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4032","cwe":"CWE-697","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-4032","date":"2026-10-08","epss":0.01079,"percentile":0.64036}],"risk":0.8092499999999999,"urls":["http://www.openwall.com/lists/oss-security/2024/06/17/3","https://github.com/python/cpython/commit/22adf29da8d99933ffed8647d3e0726edd16f7f8","https://github.com/python/cpython/commit/40d75c2b7f5c67e254d0a025e0f2e2c7ada7f69f","https://github.com/python/cpython/commit/895f7e2ac23eff4743143beef0f0c5ac71ea27d3","https://github.com/python/cpython/commit/ba431579efdcbaed7a96f2ac4ea0775879a332fb","https://github.com/python/cpython/commit/c62c9e518b784fe44432a3f4fc265fb95b651906","https://github.com/python/cpython/commit/f86b17ac511e68192ba71f27e752321a3252cee3","https://github.com/python/cpython/issues/113171","https://github.com/python/cpython/pull/113179","https://mail.python.org/archives/list/security-announce@python.org/thread/NRUHDUS2IV2USIZM2CVMSFL6SCKU3RZA/","https://security.netapp.com/advisory/ntap-20240726-0004/","https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml","https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4032","description":"The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries.\n\nCPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior."},"relatedVulnerabilities":[]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-33845","versionConstraint":"< 3.7.1-5+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-33845","fix":{"state":"fixed","versions":["3.7.1-5+deb11u10"],"available":[{"date":"2026-05-23","kind":"first-observed","version":"3.7.1-5+deb11u10"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33845","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33845","cwe":"CWE-191","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33845","date":"2026-10-08","epss":0.00886,"percentile":0.58022}],"risk":0.80183,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-33845","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-33845","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33845","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33845","cwe":"CWE-191","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33845","date":"2026-10-08","epss":0.00886,"percentile":0.58022}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:34372","https://access.redhat.com/errata/RHSA-2026:36004","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56786","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:56911","https://access.redhat.com/errata/RHSA-2026:57402","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-33845","https://bugzilla.redhat.com/show_bug.cgi?id=2450624","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33845.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33845","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service."}]},{"artifact":{"id":"b2e77aa5ecffb7d4","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33601","versionConstraint":"< 2.31-13+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-33601","fix":{"state":"fixed","versions":["2.31-13+deb11u10"],"available":[{"date":"2024-05-03","kind":"advisory","version":"2.31-13+deb11u10"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-08","epss":0.01075,"percentile":0.63946}],"risk":0.7954999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5678-1","link":"https://security-tracker.debian.org/tracker/DSA-5678-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-33601","description":"nscd: netgroup cache may terminate daemon on memory allocation failure  The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients.  The flaw was introduced in glibc 2.15 when the cache was added to nscd.  This vulnerability is only present in the nscd binary."},"relatedVulnerabilities":[{"id":"CVE-2024-33601","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-08","epss":0.01075,"percentile":0.63946}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0014/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33601","description":"nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"c2e60422a6017463","cpes":["cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33601","versionConstraint":"< 2.31-13+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-33601","fix":{"state":"fixed","versions":["2.31-13+deb11u10"],"available":[{"date":"2024-05-03","kind":"advisory","version":"2.31-13+deb11u10"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-08","epss":0.01075,"percentile":0.63946}],"risk":0.7954999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5678-1","link":"https://security-tracker.debian.org/tracker/DSA-5678-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-33601","description":"nscd: netgroup cache may terminate daemon on memory allocation failure  The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients.  The flaw was introduced in glibc 2.15 when the cache was added to nscd.  This vulnerability is only present in the nscd binary."},"relatedVulnerabilities":[{"id":"CVE-2024-33601","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-08","epss":0.01075,"percentile":0.63946}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0014/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33601","description":"nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"af7d166c6d421afa","cpes":["cpe:2.3:a:git:git:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git","purl":"pkg:deb/debian/git@1%3A2.30.2-1%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.list"},{"path":"/var/lib/dpkg/info/git.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postinst"},{"path":"/var/lib/dpkg/info/git.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postrm"},{"path":"/var/lib/dpkg/info/git.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.preinst"},{"path":"/var/lib/dpkg/info/git.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u4"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-52006","versionConstraint":"< 1:2.30.2-1+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-52006","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-52006","cwe":"CWE-116","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-52006","cwe":"CWE-147","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-52006","cwe":"CWE-150","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-52006","date":"2026-10-08","epss":0.01057,"percentile":0.63427}],"risk":0.7927500000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-52006","description":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems (most notably, .NET and node.js) interpret single Carriage Return characters as newlines, which renders the protections against CVE-2020-5260 incomplete for credential helpers that treat Carriage Returns in this way. This issue has been addressed in commit `b01b9b8` which is included in release versions v2.48.1, v2.47.2, v2.46.3, v2.45.3, v2.44.3, v2.43.6, v2.42.4, v2.41.3, and v2.40.4. Users are advised to upgrade. Users unable to upgrade should avoid cloning from untrusted URLs, especially recursive clones."},"relatedVulnerabilities":[{"id":"CVE-2024-52006","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-52006","cwe":"CWE-116","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-52006","cwe":"CWE-147","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-52006","cwe":"CWE-150","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-52006","date":"2026-10-08","epss":0.01057,"percentile":0.63427}],"urls":["https://github.com/git-ecosystem/git-credential-manager/security/advisories/GHSA-86c2-4x57-wc8g","https://github.com/git/git/commit/b01b9b81d36759cdcd07305e78765199e1bc2060","https://github.com/git/git/security/advisories/GHSA-qm7j-c969-7j4q","https://github.com/git/git/security/advisories/GHSA-r5ph-xg7q-xfrp","https://lists.debian.org/debian-lts-announce/2025/01/msg00025.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-52006","description":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems (most notably, .NET and node.js) interpret single Carriage Return characters as newlines, which renders the protections against CVE-2020-5260 incomplete for credential helpers that treat Carriage Returns in this way. This issue has been addressed in commit `b01b9b8` which is included in release versions v2.48.1, v2.47.2, v2.46.3, v2.45.3, v2.44.3, v2.43.6, v2.42.4, v2.41.3, and v2.40.4. Users are advised to upgrade. Users unable to upgrade should avoid cloning from untrusted URLs, especially recursive clones."}]},{"artifact":{"id":"64d1fb374de95eb2","cpes":["cpe:2.3:a:git-man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git-man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git-man","purl":"pkg:deb/debian/git-man@1%3A2.30.2-1%2Bdeb11u2?arch=all&distro=debian-11.7&upstream=git","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git-man/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git-man/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.list"}],"upstreams":[{"name":"git"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-52006","versionConstraint":"< 1:2.30.2-1+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-52006","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-52006","cwe":"CWE-116","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-52006","cwe":"CWE-147","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-52006","cwe":"CWE-150","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-52006","date":"2026-10-08","epss":0.01057,"percentile":0.63427}],"risk":0.7927500000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-52006","description":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems (most notably, .NET and node.js) interpret single Carriage Return characters as newlines, which renders the protections against CVE-2020-5260 incomplete for credential helpers that treat Carriage Returns in this way. This issue has been addressed in commit `b01b9b8` which is included in release versions v2.48.1, v2.47.2, v2.46.3, v2.45.3, v2.44.3, v2.43.6, v2.42.4, v2.41.3, and v2.40.4. Users are advised to upgrade. Users unable to upgrade should avoid cloning from untrusted URLs, especially recursive clones."},"relatedVulnerabilities":[{"id":"CVE-2024-52006","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-52006","cwe":"CWE-116","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-52006","cwe":"CWE-147","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-52006","cwe":"CWE-150","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-52006","date":"2026-10-08","epss":0.01057,"percentile":0.63427}],"urls":["https://github.com/git-ecosystem/git-credential-manager/security/advisories/GHSA-86c2-4x57-wc8g","https://github.com/git/git/commit/b01b9b81d36759cdcd07305e78765199e1bc2060","https://github.com/git/git/security/advisories/GHSA-qm7j-c969-7j4q","https://github.com/git/git/security/advisories/GHSA-r5ph-xg7q-xfrp","https://lists.debian.org/debian-lts-announce/2025/01/msg00025.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-52006","description":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems (most notably, .NET and node.js) interpret single Carriage Return characters as newlines, which renders the protections against CVE-2020-5260 incomplete for credential helpers that treat Carriage Returns in this way. This issue has been addressed in commit `b01b9b8` which is included in release versions v2.48.1, v2.47.2, v2.46.3, v2.45.3, v2.44.3, v2.43.6, v2.42.4, v2.41.3, and v2.40.4. Users are advised to upgrade. Users unable to upgrade should avoid cloning from untrusted URLs, especially recursive clones."}]},{"artifact":{"id":"5aa5fc0ebbc6f0c0","cpes":["cpe:2.3:a:org.jenkins-ci.main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:org.jenkins-ci.main:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins_core:2.407:*:*:*:*:*:*:*"],"name":"jenkins-core","purl":"pkg:maven/org.jenkins-ci.main/jenkins-core@2.407","type":"java-archive","version":"2.407","language":"java","licenses":["The MIT license"],"metadata":{"pomGroupID":"org.jenkins-ci.main","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","manifestName":"","pomArtifactID":"jenkins-core","archiveDigests":[{"value":"e7fc0a769dfabd6c316cde23c6bd1dd8a7c4d94b","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.414.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5j46-5hwq-gwh7","versionConstraint":">=2.50,<2.414.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.main:jenkins-core","version":"2.407"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-5j46-5hwq-gwh7","fix":{"state":"fixed","versions":["2.414.2"],"available":[{"date":"2023-09-22","kind":"first-observed","version":"2.414.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-43495","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-43495","date":"2026-10-08","epss":0.0102,"percentile":0.62301}],"risk":0.7905000000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-43495","https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3245","http://www.openwall.com/lists/oss-security/2023/09/20/5"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5j46-5hwq-gwh7","description":"Jenkins Cross-site Scripting vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-43495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-43495","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-43495","date":"2026-10-08","epss":0.0102,"percentile":0.62301}],"urls":["http://www.openwall.com/lists/oss-security/2023/09/20/5","https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3245"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-43495","description":"Jenkins 2.423 and earlier, LTS 2.414.1 and earlier does not escape the value of the 'caption' constructor parameter of 'ExpandableDetailsNote', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control this parameter."}]},{"artifact":{"id":"b74732b8fd8b87cf","cpes":["cpe:2.3:a:libpng16-16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*","cpe:2.3:a:libpng16-16:libpng16_16:1.6.37-3:*:*:*:*:*:*:*","cpe:2.3:a:libpng16_16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*","cpe:2.3:a:libpng16_16:libpng16_16:1.6.37-3:*:*:*:*:*:*:*","cpe:2.3:a:libpng16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*","cpe:2.3:a:libpng16:libpng16_16:1.6.37-3:*:*:*:*:*:*:*"],"name":"libpng16-16","purl":"pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.7&upstream=libpng1.6","type":"deb","version":"1.6.37-3","language":"","licenses":["Apache-2.0","BSD-3-clause","BSD-like-with-advertising-clause","GPL-2","GPL-2+","expat","libpng"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpng16-16/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libpng16-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpng16-16:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libpng16-16:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libpng1.6"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.6.37-3+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-33416","versionConstraint":"< 1.6.37-3+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"libpng1.6","version":"1.6.37-3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-33416","fix":{"state":"fixed","versions":["1.6.37-3+deb11u3"],"available":[{"date":"2026-04-03","kind":"first-observed","version":"1.6.37-3+deb11u3"}]},"cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33416","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33416","date":"2026-10-08","epss":0.01052,"percentile":0.63289}],"risk":0.7889999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-33416","description":"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_struct` and `png_info`, sharing a single allocation across two structs with independent lifetimes. The `trans_alpha` aliasing has been present since at least libpng 1.0, and the `palette` aliasing since at least 1.2.1. Both affect all prior release lines `png_set_tRNS` sets `png_ptr->trans_alpha = info_ptr->trans_alpha` (256-byte buffer) and `png_set_PLTE` sets `info_ptr->palette = png_ptr->palette` (768-byte buffer). In both cases, calling `png_free_data` (with `PNG_FREE_TRNS` or `PNG_FREE_PLTE`) frees the buffer through `info_ptr` while the corresponding `png_ptr` pointer remains dangling. Subsequent row-transform functions dereference and, in some code paths, write to the freed memory. A second call to `png_set_tRNS` or `png_set_PLTE` has the same effect, because both functions call `png_free_data` internally before reallocating the `info_ptr` buffer. Version 1.6.56 fixes the issue."},"relatedVulnerabilities":[{"id":"CVE-2026-33416","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33416","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33416","date":"2026-10-08","epss":0.01052,"percentile":0.63289}],"urls":["https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb","https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667","https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25","https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1","https://github.com/pnggroup/libpng/pull/824","https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33416","description":"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_struct` and `png_info`, sharing a single allocation across two structs with independent lifetimes. The `trans_alpha` aliasing has been present since at least libpng 1.0, and the `palette` aliasing since at least 1.2.1. Both affect all prior release lines `png_set_tRNS` sets `png_ptr->trans_alpha = info_ptr->trans_alpha` (256-byte buffer) and `png_set_PLTE` sets `info_ptr->palette = png_ptr->palette` (768-byte buffer). In both cases, calling `png_free_data` (with `PNG_FREE_TRNS` or `PNG_FREE_PLTE`) frees the buffer through `info_ptr` while the corresponding `png_ptr` pointer remains dangling. Subsequent row-transform functions dereference and, in some code paths, write to the freed memory. A second call to `png_set_tRNS` or `png_set_PLTE` has the same effect, because both functions call `png_free_data` internally before reallocating the `info_ptr` buffer. Version 1.6.56 fixes the issue."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.21.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2024-2609","versionConstraint":"<1.21.8||>=1.22.0-0,<1.22.1 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2024-2609","fix":{"state":"fixed","versions":["1.21.8","1.22.1"],"available":[{"date":"2024-03-05","kind":"release","version":"1.21.8"},{"date":"2024-03-05","kind":"release","version":"1.22.1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-24784","date":"2026-10-08","epss":0.0105,"percentile":0.63221}],"risk":0.7875,"urls":["https://go.dev/cl/555596","https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/65083","description":"The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers."},"relatedVulnerabilities":[{"id":"CVE-2024-24784","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-24784","date":"2026-10-08","epss":0.0105,"percentile":0.63221}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/08/4","https://go.dev/cl/555596","https://go.dev/issue/65083","https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg","https://pkg.go.dev/vuln/GO-2024-2609","https://security.netapp.com/advisory/ntap-20240329-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-24784","description":"The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers."}]},{"artifact":{"id":"af7d166c6d421afa","cpes":["cpe:2.3:a:git:git:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git","purl":"pkg:deb/debian/git@1%3A2.30.2-1%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.list"},{"path":"/var/lib/dpkg/info/git.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postinst"},{"path":"/var/lib/dpkg/info/git.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postrm"},{"path":"/var/lib/dpkg/info/git.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.preinst"},{"path":"/var/lib/dpkg/info/git.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-32465","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-32465","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32465","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-32465","date":"2026-10-08","epss":0.01026,"percentile":0.62502}],"risk":0.7848900000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-32465","description":"Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific protections to make that a safe operation even with an untrusted source repository, but vulnerabilities allow those protections to be bypassed. In the context of cloning local repositories owned by other users, this vulnerability has been covered in CVE-2024-32004. But there are circumstances where the fixes for CVE-2024-32004 are not enough: For example, when obtaining a `.zip` file containing a full copy of a Git repository, it should not be trusted by default to be safe, as e.g. hooks could be configured to run within the context of that repository. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid using Git in repositories that have been obtained via archives from untrusted sources."},"relatedVulnerabilities":[{"id":"CVE-2024-32465","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":6.1,"exploitabilityScore":0.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32465","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-32465","date":"2026-10-08","epss":0.01026,"percentile":0.62502}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/14/2","https://git-scm.com/docs/git#_security","https://git-scm.com/docs/git-clone","https://github.com/git/git/commit/7b70e9efb18c2cc3f219af399bd384c5801ba1d7","https://github.com/git/git/security/advisories/GHSA-vm9j-46j9-qvq4","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S4CK4IYTXEOBZTEM5K3T6LWOIZ3S44AR/","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-32465","description":"Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific protections to make that a safe operation even with an untrusted source repository, but vulnerabilities allow those protections to be bypassed. In the context of cloning local repositories owned by other users, this vulnerability has been covered in CVE-2024-32004. But there are circumstances where the fixes for CVE-2024-32004 are not enough: For example, when obtaining a `.zip` file containing a full copy of a Git repository, it should not be trusted by default to be safe, as e.g. hooks could be configured to run within the context of that repository. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid using Git in repositories that have been obtained via archives from untrusted sources."}]},{"artifact":{"id":"64d1fb374de95eb2","cpes":["cpe:2.3:a:git-man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git-man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git-man","purl":"pkg:deb/debian/git-man@1%3A2.30.2-1%2Bdeb11u2?arch=all&distro=debian-11.7&upstream=git","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git-man/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git-man/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.list"}],"upstreams":[{"name":"git"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-32465","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-32465","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32465","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-32465","date":"2026-10-08","epss":0.01026,"percentile":0.62502}],"risk":0.7848900000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-32465","description":"Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific protections to make that a safe operation even with an untrusted source repository, but vulnerabilities allow those protections to be bypassed. In the context of cloning local repositories owned by other users, this vulnerability has been covered in CVE-2024-32004. But there are circumstances where the fixes for CVE-2024-32004 are not enough: For example, when obtaining a `.zip` file containing a full copy of a Git repository, it should not be trusted by default to be safe, as e.g. hooks could be configured to run within the context of that repository. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid using Git in repositories that have been obtained via archives from untrusted sources."},"relatedVulnerabilities":[{"id":"CVE-2024-32465","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":6.1,"exploitabilityScore":0.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32465","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-32465","date":"2026-10-08","epss":0.01026,"percentile":0.62502}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/14/2","https://git-scm.com/docs/git#_security","https://git-scm.com/docs/git-clone","https://github.com/git/git/commit/7b70e9efb18c2cc3f219af399bd384c5801ba1d7","https://github.com/git/git/security/advisories/GHSA-vm9j-46j9-qvq4","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S4CK4IYTXEOBZTEM5K3T6LWOIZ3S44AR/","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-32465","description":"Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific protections to make that a safe operation even with an untrusted source repository, but vulnerabilities allow those protections to be bypassed. In the context of cloning local repositories owned by other users, this vulnerability has been covered in CVE-2024-32004. But there are circumstances where the fixes for CVE-2024-32004 are not enough: For example, when obtaining a `.zip` file containing a full copy of a Git repository, it should not be trusted by default to be safe, as e.g. hooks could be configured to run within the context of that repository. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid using Git in repositories that have been obtained via archives from untrusted sources."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.22.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2024-3107","versionConstraint":"<1.22.7||>=1.23.0-0,<1.23.1 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2024-3107","fix":{"state":"fixed","versions":["1.22.7","1.23.1"],"available":[{"date":"2024-09-05","kind":"release","version":"1.22.7"},{"date":"2024-09-05","kind":"release","version":"1.23.1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34158","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34158","date":"2026-10-08","epss":0.01046,"percentile":0.63108}],"risk":0.7845000000000001,"urls":["https://go.dev/issue/69141","https://groups.google.com/g/golang-dev/c/S9POB9NCTdk"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/611240","description":"Calling Parse on a \"// +build\" build tag line with deeply nested expressions can cause a panic due to stack exhaustion."},"relatedVulnerabilities":[{"id":"CVE-2024-34158","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34158","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34158","date":"2026-10-08","epss":0.01046,"percentile":0.63108}],"urls":["https://go.dev/cl/611240","https://go.dev/issue/69141","https://groups.google.com/g/golang-dev/c/S9POB9NCTdk","https://pkg.go.dev/vuln/GO-2024-3107","https://security.netapp.com/advisory/ntap-20241004-0003/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34158","description":"Calling Parse on a \"// +build\" build tag line with deeply nested expressions can cause a panic due to stack exhaustion."}]},{"artifact":{"id":"f794937746a06306","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.4.2:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2","type":"java-archive","version":"2.13.4.2","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jackson2-api.hpi:WEB-INF/lib/jackson-databind-2.13.4.2.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"325c06bdfeb628cfb80ebaaf1a26cc1eb558a585","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jackson2-api.hpi:WEB-INF/lib/jackson-databind-2.13.4.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j3rv-43j4-c7qm","versionConstraint":">=2.10.0,<=2.18.7 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.13.4.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-j3rv-43j4-c7qm","fix":{"state":"fixed","versions":["2.18.8"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.18.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54512","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54512","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54512","date":"2026-10-08","epss":0.00999,"percentile":0.61664}],"risk":0.7792200000000001,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm","https://github.com/FasterXML/jackson-databind/issues/5988","https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","https://nvd.nist.gov/vuln/detail/CVE-2026-54512"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j3rv-43j4-c7qm","description":"jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation"},"relatedVulnerabilities":[{"id":"CVE-2026-54512","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54512","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54512","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54512","date":"2026-10-08","epss":0.00999,"percentile":0.61664}],"urls":["https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","https://github.com/FasterXML/jackson-databind/issues/5988","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54512","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymorphic deserialization. When polymorphic typing is enabled and a type identifier contains generic parameters (i.e. the type ID string contains <), DatabindContext._resolveAndValidateGeneric() validates only the raw container class name (the substring before <) against the configured PTV. If the container type is approved, the method parses the full canonical type string via TypeFactory.constructFromCanonical() and returns the fully parameterized type without ever validating the nested type arguments against the PTV. The nested type arguments are then resolved, instantiated, and populated as beans during deserialization. An attacker who controls the type ID can therefore place a denied class as a generic type parameter of an allowed container — for example java.util.ArrayList<com.evil.Gadget> when only java.util.ArrayList is allow-listed. The container passes the PTV check; com.evil.Gadget is loaded via Class.forName(name, true, loader), instantiated, and its properties are set from attacker-controlled JSON. This completely bypasses an explicitly configured PTV allow-list. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4."}]},{"artifact":{"id":"54929a019a4be8e5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.14.2:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2","type":"java-archive","version":"2.14.2","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:28ce38a426e8c5f4d5c1503345486bf2d71355572ce12a34d66ff30128719565","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j3rv-43j4-c7qm","versionConstraint":">=2.10.0,<=2.18.7 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.14.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-j3rv-43j4-c7qm","fix":{"state":"fixed","versions":["2.18.8"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.18.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54512","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54512","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54512","date":"2026-10-08","epss":0.00999,"percentile":0.61664}],"risk":0.7792200000000001,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm","https://github.com/FasterXML/jackson-databind/issues/5988","https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","https://nvd.nist.gov/vuln/detail/CVE-2026-54512"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j3rv-43j4-c7qm","description":"jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation"},"relatedVulnerabilities":[{"id":"CVE-2026-54512","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54512","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54512","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54512","date":"2026-10-08","epss":0.00999,"percentile":0.61664}],"urls":["https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","https://github.com/FasterXML/jackson-databind/issues/5988","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54512","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymorphic deserialization. When polymorphic typing is enabled and a type identifier contains generic parameters (i.e. the type ID string contains <), DatabindContext._resolveAndValidateGeneric() validates only the raw container class name (the substring before <) against the configured PTV. If the container type is approved, the method parses the full canonical type string via TypeFactory.constructFromCanonical() and returns the fully parameterized type without ever validating the nested type arguments against the PTV. The nested type arguments are then resolved, instantiated, and populated as beans during deserialization. An attacker who controls the type ID can therefore place a denied class as a generic type parameter of an allowed container — for example java.util.ArrayList<com.evil.Gadget> when only java.util.ArrayList is allow-listed. The container passes the PTV check; com.evil.Gadget is loaded via Class.forName(name, true, loader), instantiated, and its properties are set from attacker-controlled JSON. This completely bypasses an explicitly configured PTV allow-list. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4."}]},{"artifact":{"id":"9bd5c64d00066e09","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.15.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.15.2:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2","type":"java-archive","version":"2.15.2","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/share/jenkins/ref/plugins/jackson2-api.jpi:WEB-INF/lib/jackson-databind-2.15.2.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"9353b021f10c307c00328f52090de2bdb4b6ff9c","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/jackson2-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/jackson2-api.jpi:WEB-INF/lib/jackson-databind-2.15.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j3rv-43j4-c7qm","versionConstraint":">=2.10.0,<=2.18.7 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.15.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-j3rv-43j4-c7qm","fix":{"state":"fixed","versions":["2.18.8"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.18.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54512","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54512","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54512","date":"2026-10-08","epss":0.00999,"percentile":0.61664}],"risk":0.7792200000000001,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm","https://github.com/FasterXML/jackson-databind/issues/5988","https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","https://nvd.nist.gov/vuln/detail/CVE-2026-54512"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j3rv-43j4-c7qm","description":"jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation"},"relatedVulnerabilities":[{"id":"CVE-2026-54512","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54512","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54512","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54512","date":"2026-10-08","epss":0.00999,"percentile":0.61664}],"urls":["https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","https://github.com/FasterXML/jackson-databind/issues/5988","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54512","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymorphic deserialization. When polymorphic typing is enabled and a type identifier contains generic parameters (i.e. the type ID string contains <), DatabindContext._resolveAndValidateGeneric() validates only the raw container class name (the substring before <) against the configured PTV. If the container type is approved, the method parses the full canonical type string via TypeFactory.constructFromCanonical() and returns the fully parameterized type without ever validating the nested type arguments against the PTV. The nested type arguments are then resolved, instantiated, and populated as beans during deserialization. An attacker who controls the type ID can therefore place a denied class as a generic type parameter of an allowed container — for example java.util.ArrayList<com.evil.Gadget> when only java.util.ArrayList is allow-listed. The container passes the PTV check; com.evil.Gadget is loaded via Class.forName(name, true, loader), instantiated, and its properties are set from attacker-controlled JSON. This completely bypasses an explicitly configured PTV allow-list. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-23914","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-23914","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-23914","date":"2026-10-08","epss":0.00858,"percentile":0.57179}],"risk":0.7764900000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-23914","description":"A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on."},"relatedVulnerabilities":[{"id":"CVE-2023-23914","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-23914","date":"2026-10-08","epss":0.00858,"percentile":0.57179}],"urls":["https://hackerone.com/reports/1813864","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230309-0006/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-23914","description":"A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-23914","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-23914","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-23914","date":"2026-10-08","epss":0.00858,"percentile":0.57179}],"risk":0.7764900000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-23914","description":"A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on."},"relatedVulnerabilities":[{"id":"CVE-2023-23914","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-23914","date":"2026-10-08","epss":0.00858,"percentile":0.57179}],"urls":["https://hackerone.com/reports/1813864","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230309-0006/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-23914","description":"A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-23914","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-23914","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-23914","date":"2026-10-08","epss":0.00858,"percentile":0.57179}],"risk":0.7764900000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-23914","description":"A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on."},"relatedVulnerabilities":[{"id":"CVE-2023-23914","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-23914","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-23914","date":"2026-10-08","epss":0.00858,"percentile":0.57179}],"urls":["https://hackerone.com/reports/1813864","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230309-0006/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-23914","description":"A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on."}]},{"artifact":{"id":"52801fdd7327cc2a","cpes":["cpe:2.3:a:tar:tar:1.34\\+dfsg-1:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:deb/debian/tar@1.34%2Bdfsg-1?arch=amd64&distro=debian-11.7","type":"deb","version":"1.34+dfsg-1","language":"","licenses":["sha256:5e07fa97dc98e502dc15d09d4c14647ec77509f949267a30d1341cadf84d629f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/tar/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/tar/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/tar.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/tar.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/tar.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/tar.list"},{"path":"/var/lib/dpkg/info/tar.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/tar.postinst"},{"path":"/var/lib/dpkg/info/tar.prerm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/tar.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.34+dfsg-1+deb11u1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-48303","versionConstraint":"< 1.34+dfsg-1+deb11u1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"tar","version":"1.34+dfsg-1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2022-48303","fix":{"state":"fixed","versions":["1.34+dfsg-1+deb11u1"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.34+dfsg-1+deb11u1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48303","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-48303","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-48303","date":"2026-10-08","epss":0.01476,"percentile":0.73057}],"risk":0.7749,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-48303","description":"GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters."},"relatedVulnerabilities":[{"id":"CVE-2022-48303","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48303","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-48303","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-48303","date":"2026-10-08","epss":0.01476,"percentile":0.73057}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRY7VEL4AIG3GLIEVCTOXRZNSVYDYYUD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5VQYCO52Z7GAVCLRYUITN7KXHLRZQS4/","https://savannah.gnu.org/bugs/?62387","https://savannah.gnu.org/patch/?10307"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-48303","description":"GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters."}]},{"artifact":{"id":"5aa5fc0ebbc6f0c0","cpes":["cpe:2.3:a:org.jenkins-ci.main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:org.jenkins-ci.main:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins_core:2.407:*:*:*:*:*:*:*"],"name":"jenkins-core","purl":"pkg:maven/org.jenkins-ci.main/jenkins-core@2.407","type":"java-archive","version":"2.407","language":"java","licenses":["The MIT license"],"metadata":{"pomGroupID":"org.jenkins-ci.main","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","manifestName":"","pomArtifactID":"jenkins-core","archiveDigests":[{"value":"e7fc0a769dfabd6c316cde23c6bd1dd8a7c4d94b","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.414.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-69vw-3pcm-84rw","versionConstraint":">=2.402,<2.414.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.main:jenkins-core","version":"2.407"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-69vw-3pcm-84rw","fix":{"state":"fixed","versions":["2.414.1"],"available":[{"date":"2023-08-22","kind":"first-observed","version":"2.414.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39151","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-39151","date":"2026-10-08","epss":0.00996,"percentile":0.61552}],"risk":0.7719,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-39151","https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3188","http://www.openwall.com/lists/oss-security/2023/07/26/2","https://github.com/jenkinsci/jenkins/commit/1b9f1ccdbb7d00705b036d1332908fe52c2cd7ae","https://github.com/CVEProject/cvelist/blob/975222d6e43b5b1296dbc8a67d03704a1d2554e8/2023/39xxx/CVE-2023-39151.json"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-69vw-3pcm-84rw","description":"Jenkins Stored Cross-site Scripting vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-39151","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39151","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-39151","date":"2026-10-08","epss":0.00996,"percentile":0.61552}],"urls":["http://www.openwall.com/lists/oss-security/2023/07/26/2","https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3188"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39151","description":"Jenkins 2.415 and earlier, LTS 2.401.2 and earlier does not sanitize or properly encode URLs in build logs when transforming them into hyperlinks, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control build log contents."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1751","versionConstraint":"<1.19.9||>=1.20.0-0,<1.20.4 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1751","fix":{"state":"fixed","versions":["1.19.9","1.20.4"],"available":[{"date":"2023-05-02","kind":"release","version":"1.19.9"},{"date":"2023-05-02","kind":"release","version":"1.20.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24539","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24539","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24539","date":"2026-10-08","epss":0.01037,"percentile":0.62858}],"risk":0.7673800000000001,"urls":["https://go.dev/cl/491615","https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/59720","description":"Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input."},"relatedVulnerabilities":[{"id":"CVE-2023-24539","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24539","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24539","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24539","date":"2026-10-08","epss":0.01037,"percentile":0.62858}],"urls":["https://go.dev/cl/491615","https://go.dev/issue/59720","https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU","https://pkg.go.dev/vuln/GO-2023-1751","https://security.netapp.com/advisory/ntap-20241129-0005/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-24539","description":"Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.19.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-1753","versionConstraint":"<1.19.9||>=1.20.0-0,<1.20.4 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-1753","fix":{"state":"fixed","versions":["1.19.9","1.20.4"],"available":[{"date":"2023-05-02","kind":"release","version":"1.19.9"},{"date":"2023-05-02","kind":"release","version":"1.20.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29400","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-29400","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-29400","date":"2026-10-08","epss":0.01037,"percentile":0.62858}],"risk":0.7673800000000001,"urls":["https://go.dev/cl/491617","https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/59722","description":"Templates containing actions in unquoted HTML attributes (e.g. \"attr={{.}}\") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags."},"relatedVulnerabilities":[{"id":"CVE-2023-29400","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29400","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-29400","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-29400","date":"2026-10-08","epss":0.01037,"percentile":0.62858}],"urls":["https://go.dev/cl/491617","https://go.dev/issue/59722","https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU","https://pkg.go.dev/vuln/GO-2023-1753","https://security.netapp.com/advisory/ntap-20241213-0005/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-29400","description":"Templates containing actions in unquoted HTML attributes (e.g. \"attr={{.}}\") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags."}]},{"artifact":{"id":"29f75eac1d5f2b35","cpes":["cpe:2.3:a:org.codehaus.jettison.jettison:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:org.codehaus.jettison:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:org.codehaus:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:codehaus:jettison:1.3.7:*:*:*:*:*:*:*","cpe:2.3:a:jettison:jettison:1.3.7:*:*:*:*:*:*:*"],"name":"jettison","purl":"pkg:maven/org.codehaus.jettison/jettison@1.3.7","type":"java-archive","version":"1.3.7","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"org.codehaus.jettison","virtualPath":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi:WEB-INF/lib/jettison-1.3.7.jar","manifestName":"","pomArtifactID":"jettison","archiveDigests":[{"value":"7d36a59a0577f11b12088b9e215d6860345b9e1d","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/jersey2-api.jpi:WEB-INF/lib/jettison-1.3.7.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.5.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q6g2-g7f3-rr83","versionConstraint":"<1.5.4 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.codehaus.jettison:jettison","version":"1.3.7"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-q6g2-g7f3-rr83","fix":{"state":"fixed","versions":["1.5.4"],"available":[{"date":"2023-03-23","kind":"first-observed","version":"1.5.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-1436","cwe":"CWE-674","type":"Secondary","source":"reefs@jfrog.com"},{"cve":"CVE-2023-1436","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-1436","date":"2026-10-08","epss":0.01009,"percentile":0.61993}],"risk":0.7567499999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-1436","https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/","https://github.com/jettison-json/jettison/issues/60","https://github.com/jettison-json/jettison/pull/62","https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.4"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q6g2-g7f3-rr83","description":"Jettison vulnerable to infinite recursion"},"relatedVulnerabilities":[{"id":"CVE-2023-1436","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"reefs@jfrog.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-1436","cwe":"CWE-674","type":"Secondary","source":"reefs@jfrog.com"},{"cve":"CVE-2023-1436","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-1436","date":"2026-10-08","epss":0.01009,"percentile":0.61993}],"urls":["https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-1436","description":"An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown."}]},{"artifact":{"id":"5aa5fc0ebbc6f0c0","cpes":["cpe:2.3:a:org.jenkins-ci.main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:org.jenkins-ci.main:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins_core:2.407:*:*:*:*:*:*:*"],"name":"jenkins-core","purl":"pkg:maven/org.jenkins-ci.main/jenkins-core@2.407","type":"java-archive","version":"2.407","language":"java","licenses":["The MIT license"],"metadata":{"pomGroupID":"org.jenkins-ci.main","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","manifestName":"","pomArtifactID":"jenkins-core","archiveDigests":[{"value":"e7fc0a769dfabd6c316cde23c6bd1dd8a7c4d94b","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.414.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-55wp-3pq4-w8p9","versionConstraint":">=2.50,<2.414.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.main:jenkins-core","version":"2.407"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-55wp-3pq4-w8p9","fix":{"state":"fixed","versions":["2.414.2"],"available":[{"date":"2023-09-22","kind":"first-observed","version":"2.414.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-43496","cwe":"CWE-276","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-43496","cwe":"CWE-276","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-43496","date":"2026-10-08","epss":0.01042,"percentile":0.63001}],"risk":0.7554500000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-43496","https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3072","http://www.openwall.com/lists/oss-security/2023/09/20/5","https://github.com/jenkinsci/jenkins/commit/df7c4ccda8976c06bf31b8fb9938f26fc38501ca"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-55wp-3pq4-w8p9","description":"Jenkins temporary plugin file created with insecure permissions"},"relatedVulnerabilities":[{"id":"CVE-2023-43496","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-43496","cwe":"CWE-276","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-43496","cwe":"CWE-276","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-43496","date":"2026-10-08","epss":0.01042,"percentile":0.63001}],"urls":["http://www.openwall.com/lists/oss-security/2023/09/20/5","https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3072"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-43496","description":"Jenkins 2.423 and earlier, LTS 2.414.1 and earlier creates a temporary file in the system temporary directory with the default permissions for newly created files when installing a plugin from a URL, potentially allowing attackers with access to the system temporary directory to replace the file before it is installed in Jenkins, potentially resulting in arbitrary code execution."}]},{"artifact":{"id":"5cbe3f732233927f","cpes":["cpe:2.3:a:org.springframework.security:spring-security-core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.security:spring_security_core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.security:spring_security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security-core:spring-security-core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security-core:spring_security_core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security_core:spring-security-core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security_core:spring_security_core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.security:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security-core:spring_security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security:spring-security-core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security:spring_security_core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security:spring-security-core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security:spring_security_core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security_core:spring_security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-security-core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_security_core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security:spring_security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security:spring_security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:security:spring-security-core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:security:spring_security_core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security-core:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security_core:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-security-core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_security_core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:vmware:spring-security-core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:vmware:spring_security_core:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:security:spring_security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring-security:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring_security:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:springframework:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:vmware:spring_security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:security:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:spring:security:5.8.3:*:*:*:*:*:*:*","cpe:2.3:a:vmware:security:5.8.3:*:*:*:*:*:*:*"],"name":"spring-security-core","purl":"pkg:maven/org.springframework.security/spring-security-core@5.8.3","type":"java-archive","version":"5.8.3","language":"java","licenses":[],"metadata":{"pomGroupID":"org.springframework.security","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-security-core-5.8.3.jar","manifestName":"","pomArtifactID":"spring-security-core","archiveDigests":[{"value":"6a0c81f91d0176a032e122f5a6dd32305015ccc2","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/spring-security-core-5.8.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.8.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-f3jh-qvm4-mg39","versionConstraint":">=5.8.0,<5.8.11 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework.security:spring-security-core","version":"5.8.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-f3jh-qvm4-mg39","fix":{"state":"fixed","versions":["5.8.11"],"available":[{"date":"2024-03-19","kind":"first-observed","version":"5.8.11"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22257","cwe":"CWE-862","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22257","date":"2026-10-08","epss":0.00956,"percentile":0.60226}],"risk":0.75046,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-22257","https://spring.io/security/cve-2024-22257","https://github.com/spring-projects/spring-security/commit/5a7f12f1a9fdb4edaab6f61495f1d781a7273b61","https://security.netapp.com/advisory/ntap-20240419-0005"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-f3jh-qvm4-mg39","description":"Erroneous authentication pass in Spring Security"},"relatedVulnerabilities":[{"id":"CVE-2024-22257","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22257","cwe":"CWE-862","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22257","date":"2026-10-08","epss":0.00956,"percentile":0.60226}],"urls":["https://security.netapp.com/advisory/ntap-20240419-0005/","https://spring.io/security/cve-2024-22257","https://github.com/dependency-check/DependencyCheck/issues/8642"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22257","description":"In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to \n5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, \nversions 6.2.x prior to 6.2.3, an application is possible vulnerable to \nbroken access control when it directly uses the AuthenticatedVoter#vote passing a null Authentication parameter."}]},{"artifact":{"id":"af7d166c6d421afa","cpes":["cpe:2.3:a:git:git:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git","purl":"pkg:deb/debian/git@1%3A2.30.2-1%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.list"},{"path":"/var/lib/dpkg/info/git.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postinst"},{"path":"/var/lib/dpkg/info/git.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.postrm"},{"path":"/var/lib/dpkg/info/git.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.preinst"},{"path":"/var/lib/dpkg/info/git.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-32021","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-32021","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32021","cwe":"CWE-547","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-32021","date":"2026-10-08","epss":0.01023,"percentile":0.62406}],"risk":0.74679,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-32021","description":"Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create hardlinks to arbitrary user-readable files on the same filesystem as the target repository in the `objects/` directory. Cloning a local repository over the filesystem may creating hardlinks to arbitrary user-owned files on the same filesystem in the target Git repository's `objects/` directory. When cloning a repository over the filesystem (without explicitly specifying the `file://` protocol or `--no-local`), the optimizations for local cloning will be used, which include attempting to hard link the object files instead of copying them. While the code includes checks against symbolic links in the source repository, which were added during the fix for CVE-2022-39253, these checks can still be raced because the hard link operation ultimately follows symlinks. If the object on the filesystem appears as a file during the check, and then a symlink during the operation, this will allow the adversary to bypass the check and create hardlinks in the destination objects directory to arbitrary, user-readable files. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4."},"relatedVulnerabilities":[{"id":"CVE-2024-32021","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L","metrics":{"baseScore":3.9,"impactScore":2.8,"exploitabilityScore":0.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32021","cwe":"CWE-547","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-32021","date":"2026-10-08","epss":0.01023,"percentile":0.62406}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/14/2","https://github.com/git/git/security/advisories/GHSA-mvxm-9j2h-qjx7","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S4CK4IYTXEOBZTEM5K3T6LWOIZ3S44AR/","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-32021","description":"Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create hardlinks to arbitrary user-readable files on the same filesystem as the target repository in the `objects/` directory. Cloning a local repository over the filesystem may creating hardlinks to arbitrary user-owned files on the same filesystem in the target Git repository's `objects/` directory. When cloning a repository over the filesystem (without explicitly specifying the `file://` protocol or `--no-local`), the optimizations for local cloning\nwill be used, which include attempting to hard link the object files instead of copying them. While the code includes checks against symbolic links in the source repository, which were added during the fix for CVE-2022-39253, these checks can still be raced because the hard link operation ultimately follows symlinks. If the object on the filesystem appears as a file during the check, and then a symlink during the operation, this will allow the adversary to bypass the check and create hardlinks in the destination objects directory to arbitrary, user-readable files. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4."}]},{"artifact":{"id":"64d1fb374de95eb2","cpes":["cpe:2.3:a:git-man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git-man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git-man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:git:git_man:1\\:2.30.2-1\\+deb11u2:*:*:*:*:*:*:*"],"name":"git-man","purl":"pkg:deb/debian/git-man@1%3A2.30.2-1%2Bdeb11u2?arch=all&distro=debian-11.7&upstream=git","type":"deb","version":"1:2.30.2-1+deb11u2","language":"","licenses":["Apache-2.0","Artistic","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git-man/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/git-man/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/git-man.list"}],"upstreams":[{"name":"git"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:2.30.2-1+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-32021","versionConstraint":"< 1:2.30.2-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"git","version":"1:2.30.2-1+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-32021","fix":{"state":"fixed","versions":["1:2.30.2-1+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1:2.30.2-1+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32021","cwe":"CWE-547","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-32021","date":"2026-10-08","epss":0.01023,"percentile":0.62406}],"risk":0.74679,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-32021","description":"Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create hardlinks to arbitrary user-readable files on the same filesystem as the target repository in the `objects/` directory. Cloning a local repository over the filesystem may creating hardlinks to arbitrary user-owned files on the same filesystem in the target Git repository's `objects/` directory. When cloning a repository over the filesystem (without explicitly specifying the `file://` protocol or `--no-local`), the optimizations for local cloning will be used, which include attempting to hard link the object files instead of copying them. While the code includes checks against symbolic links in the source repository, which were added during the fix for CVE-2022-39253, these checks can still be raced because the hard link operation ultimately follows symlinks. If the object on the filesystem appears as a file during the check, and then a symlink during the operation, this will allow the adversary to bypass the check and create hardlinks in the destination objects directory to arbitrary, user-readable files. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4."},"relatedVulnerabilities":[{"id":"CVE-2024-32021","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L","metrics":{"baseScore":3.9,"impactScore":2.8,"exploitabilityScore":0.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-32021","cwe":"CWE-547","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-32021","date":"2026-10-08","epss":0.01023,"percentile":0.62406}],"urls":["http://www.openwall.com/lists/oss-security/2024/05/14/2","https://github.com/git/git/security/advisories/GHSA-mvxm-9j2h-qjx7","https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S4CK4IYTXEOBZTEM5K3T6LWOIZ3S44AR/","https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-32021","description":"Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create hardlinks to arbitrary user-readable files on the same filesystem as the target repository in the `objects/` directory. Cloning a local repository over the filesystem may creating hardlinks to arbitrary user-owned files on the same filesystem in the target Git repository's `objects/` directory. When cloning a repository over the filesystem (without explicitly specifying the `file://` protocol or `--no-local`), the optimizations for local cloning\nwill be used, which include attempting to hard link the object files instead of copying them. While the code includes checks against symbolic links in the source repository, which were added during the fix for CVE-2022-39253, these checks can still be raced because the hard link operation ultimately follows symlinks. If the object on the filesystem appears as a file during the check, and then a symlink during the operation, this will allow the adversary to bypass the check and create hardlinks in the destination objects directory to arbitrary, user-readable files. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4."}]},{"artifact":{"id":"7d49c34e322be875","cpes":["cpe:2.3:a:libssh2-1:libssh2-1:1.9.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libssh2-1:libssh2_1:1.9.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libssh2_1:libssh2-1:1.9.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libssh2_1:libssh2_1:1.9.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libssh2:libssh2-1:1.9.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libssh2:libssh2_1:1.9.0-2:*:*:*:*:*:*:*"],"name":"libssh2-1","purl":"pkg:deb/debian/libssh2-1@1.9.0-2?arch=amd64&distro=debian-11.7&upstream=libssh2","type":"deb","version":"1.9.0-2","language":"","licenses":["BSD3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssh2-1/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libssh2-1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssh2-1:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libssh2-1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libssh2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7598","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"libssh2","version":"1.9.0-2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-7598","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7598","cwe":"CWE-189","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-7598","cwe":"CWE-190","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-7598","cwe":"CWE-190","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-7598","date":"2026-10-08","epss":0.00824,"percentile":0.56063}],"risk":0.74572,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-7598","description":"A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/password_len leads to integer overflow. The attack may be launched remotely. The name of the patch is 256d04b60d80bf1190e96b0ad1e91b2174d744b1. A patch should be applied to remediate this issue."},"relatedVulnerabilities":[{"id":"CVE-2026-7598","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7598","cwe":"CWE-189","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-7598","cwe":"CWE-190","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-7598","cwe":"CWE-190","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-7598","date":"2026-10-08","epss":0.00824,"percentile":0.56063}],"urls":["https://github.com/libssh2/libssh2/","https://github.com/libssh2/libssh2/commit/256d04b60d80bf1190e96b0ad1e91b2174d744b1","https://github.com/libssh2/libssh2/pull/1858","https://vuldb.com/submit/805564","https://vuldb.com/vuln/360555","https://vuldb.com/vuln/360555/cti","https://access.redhat.com/errata/RHSA-2026:16736","https://access.redhat.com/errata/RHSA-2026:61752","https://access.redhat.com/errata/RHSA-2026:7021","https://access.redhat.com/security/cve/CVE-2026-7598","https://bugzilla.redhat.com/show_bug.cgi?id=2464597","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7598.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7598","description":"A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such manipulation of the argument username_len/password_len leads to integer overflow. The attack may be launched remotely. The name of the patch is 256d04b60d80bf1190e96b0ad1e91b2174d744b1. A patch should be applied to remediate this issue."}]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5260","versionConstraint":"< 3.7.1-5+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-5260","fix":{"state":"fixed","versions":["3.7.1-5+deb11u10"],"available":[{"date":"2026-05-23","kind":"first-observed","version":"3.7.1-5+deb11u10"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5260","cwe":"CWE-126","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5260","date":"2026-10-08","epss":0.00945,"percentile":0.59888}],"risk":0.741825,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-5260","description":"A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-5260","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5260","cwe":"CWE-126","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5260","date":"2026-10-08","epss":0.00945,"percentile":0.59888}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:67837","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-5260","https://bugzilla.redhat.com/show_bug.cgi?id=2467450","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-10"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5260","description":"A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-28322","versionConstraint":"< 7.74.0-1.3+deb11u9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-28322","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u9"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u9"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-28322","cwe":"CWE-200","type":"Secondary","source":"support@hackerone.com"}],"epss":[{"cve":"CVE-2023-28322","date":"2026-10-08","epss":0.02211,"percentile":0.82062}],"risk":0.7406849999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-28322","description":"An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST."},"relatedVulnerabilities":[{"id":"CVE-2023-28322","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-28322","cwe":"CWE-200","type":"Secondary","source":"support@hackerone.com"}],"epss":[{"cve":"CVE-2023-28322","date":"2026-10-08","epss":0.02211,"percentile":0.82062}],"urls":["http://seclists.org/fulldisclosure/2023/Jul/47","http://seclists.org/fulldisclosure/2023/Jul/48","http://seclists.org/fulldisclosure/2023/Jul/52","https://hackerone.com/reports/1954658","https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230609-0009/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-28322","description":"An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-28322","versionConstraint":"< 7.74.0-1.3+deb11u9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-28322","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u9"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u9"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-28322","cwe":"CWE-200","type":"Secondary","source":"support@hackerone.com"}],"epss":[{"cve":"CVE-2023-28322","date":"2026-10-08","epss":0.02211,"percentile":0.82062}],"risk":0.7406849999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-28322","description":"An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST."},"relatedVulnerabilities":[{"id":"CVE-2023-28322","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-28322","cwe":"CWE-200","type":"Secondary","source":"support@hackerone.com"}],"epss":[{"cve":"CVE-2023-28322","date":"2026-10-08","epss":0.02211,"percentile":0.82062}],"urls":["http://seclists.org/fulldisclosure/2023/Jul/47","http://seclists.org/fulldisclosure/2023/Jul/48","http://seclists.org/fulldisclosure/2023/Jul/52","https://hackerone.com/reports/1954658","https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230609-0009/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-28322","description":"An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-28322","versionConstraint":"< 7.74.0-1.3+deb11u9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-28322","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u9"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u9"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-28322","cwe":"CWE-200","type":"Secondary","source":"support@hackerone.com"}],"epss":[{"cve":"CVE-2023-28322","date":"2026-10-08","epss":0.02211,"percentile":0.82062}],"risk":0.7406849999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-28322","description":"An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST."},"relatedVulnerabilities":[{"id":"CVE-2023-28322","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-28322","cwe":"CWE-200","type":"Secondary","source":"support@hackerone.com"}],"epss":[{"cve":"CVE-2023-28322","date":"2026-10-08","epss":0.02211,"percentile":0.82062}],"urls":["http://seclists.org/fulldisclosure/2023/Jul/47","http://seclists.org/fulldisclosure/2023/Jul/48","http://seclists.org/fulldisclosure/2023/Jul/52","https://hackerone.com/reports/1954658","https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230609-0009/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-28322","description":"An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28387","versionConstraint":"< 1.1.1w-0+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-28387","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u7"],"available":[{"date":"2026-06-10","kind":"first-observed","version":"1.1.1w-0+deb11u7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-08","epss":0.00943,"percentile":0.59839}],"risk":0.73554,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-28387","description":"Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side.  Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary code.  However, the issue only affects clients that make use of TLSA records with both the PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate usage.  By far the most common deployment of DANE is in SMTP MTAs for which RFC7672 recommends that clients treat as 'unusable' any TLSA records that have the PKIX certificate usages.  These SMTP (or other similar) clients are not vulnerable to this issue.  Conversely, any clients that support only the PKIX usages, and ignore the DANE-TA(2) usage are also not vulnerable.  The client would also need to be communicating with a server that publishes a TLSA RRset with both types of TLSA records.  No FIPS modules are affected by this issue, the problem code is outside the FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-28387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-08","epss":0.00943,"percentile":0.59839}],"urls":["https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b","https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe","https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3","https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7","https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28387","description":"Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28387","versionConstraint":"< 1.1.1w-0+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-28387","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u7"],"available":[{"date":"2026-06-10","kind":"first-observed","version":"1.1.1w-0+deb11u7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-08","epss":0.00943,"percentile":0.59839}],"risk":0.73554,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-28387","description":"Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side.  Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary code.  However, the issue only affects clients that make use of TLSA records with both the PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate usage.  By far the most common deployment of DANE is in SMTP MTAs for which RFC7672 recommends that clients treat as 'unusable' any TLSA records that have the PKIX certificate usages.  These SMTP (or other similar) clients are not vulnerable to this issue.  Conversely, any clients that support only the PKIX usages, and ignore the DANE-TA(2) usage are also not vulnerable.  The client would also need to be communicating with a server that publishes a TLSA RRset with both types of TLSA records.  No FIPS modules are affected by this issue, the problem code is outside the FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-28387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-08","epss":0.00943,"percentile":0.59839}],"urls":["https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b","https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe","https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3","https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7","https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28387","description":"Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.23.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2025-3563","versionConstraint":"<1.23.8||>=1.24.0-0,<1.24.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2025-3563","fix":{"state":"fixed","versions":["1.23.8","1.24.2"],"available":[{"date":"2025-04-01","kind":"release","version":"1.23.8"},{"date":"2025-04-01","kind":"release","version":"1.24.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-22871","date":"2026-10-08","epss":0.00811,"percentile":0.55659}],"risk":0.7339549999999999,"urls":["https://go.dev/issue/71988","https://groups.google.com/g/golang-announce/c/Y2uBTVKjBQk"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/652998","description":"The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext."},"relatedVulnerabilities":[{"id":"CVE-2025-22871","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-22871","date":"2026-10-08","epss":0.00811,"percentile":0.55659}],"urls":["https://go.dev/cl/652998","https://go.dev/issue/71988","https://groups.google.com/g/golang-announce/c/Y2uBTVKjBQk","https://pkg.go.dev/vuln/GO-2025-3563","http://www.openwall.com/lists/oss-security/2025/04/04/4","https://cert-portal.siemens.com/productcert/html/ssa-783943.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-22871","description":"The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-9076","versionConstraint":"< 1.1.1w-0+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-9076","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u8"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"1.1.1w-0+deb11u8"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9076","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-9076","date":"2026-10-08","epss":0.00973,"percentile":0.60827}],"risk":0.72975,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-9076","description":"Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kek_unwrap_key().  Impact summary: A heap buffer over-read may trigger a crash which leads to Denial of Service for an application if the input buffer ends at a memory page boundary and the following page is unmapped. There is no information disclosure as the over-read bytes are not revealed to the attacker.  The key unwrapping function performs a check-byte test as specified in the RFC that reads 7 bytes from a heap allocation that is based on the wrapped key length from the message. There is a minimum length check based on the block length of the wrapping cipher. However the cipher is selected from an OID carried in the attacker's PWRI keyEncryptionAlgorithm with no requirement that the cipher be a block cipher. When an attacker selects a stream-mode cipher the guard will be ineffective and the allocated buffer containing the unwrapped key can be too small to fit the check-bytes specified in the RFC and a buffer over-read can happen.  Applications calling CMS_decrypt() or CMS_decrypt_set1_password() (equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS data are vulnerable to this issue. No password knowledge is required: the over-read happens during the unwrap attempt before any authentication succeeds.  The over-read is limited to a few bytes and is not written to output, so there is no information disclosure. Triggering a crash requires the allocation to border unmapped memory, which is unlikely with the normal allocator.  The FIPS modules are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2026-9076","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9076","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-9076","date":"2026-10-08","epss":0.00973,"percentile":0.60827}],"urls":["https://github.com/openssl/openssl/commit/05b066366842f930fadd9a6e94df98030af431bb","https://github.com/openssl/openssl/commit/3d8d5bc1056b2f62da9fede23fedbf47e85187b0","https://github.com/openssl/openssl/commit/715349a1d7c6db970e6815dafb90915f07307f98","https://github.com/openssl/openssl/commit/77bf00ab13f6ff5e516535432f0328ed70ec0c26","https://github.com/openssl/openssl/commit/eecbe330977e8d023aae1ca2d9bdbe983ef3fdc6","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9076","description":"Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker's PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-9076","versionConstraint":"< 1.1.1w-0+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-9076","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u8"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"1.1.1w-0+deb11u8"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9076","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-9076","date":"2026-10-08","epss":0.00973,"percentile":0.60827}],"risk":0.72975,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-9076","description":"Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kek_unwrap_key().  Impact summary: A heap buffer over-read may trigger a crash which leads to Denial of Service for an application if the input buffer ends at a memory page boundary and the following page is unmapped. There is no information disclosure as the over-read bytes are not revealed to the attacker.  The key unwrapping function performs a check-byte test as specified in the RFC that reads 7 bytes from a heap allocation that is based on the wrapped key length from the message. There is a minimum length check based on the block length of the wrapping cipher. However the cipher is selected from an OID carried in the attacker's PWRI keyEncryptionAlgorithm with no requirement that the cipher be a block cipher. When an attacker selects a stream-mode cipher the guard will be ineffective and the allocated buffer containing the unwrapped key can be too small to fit the check-bytes specified in the RFC and a buffer over-read can happen.  Applications calling CMS_decrypt() or CMS_decrypt_set1_password() (equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS data are vulnerable to this issue. No password knowledge is required: the over-read happens during the unwrap attempt before any authentication succeeds.  The over-read is limited to a few bytes and is not written to output, so there is no information disclosure. Triggering a crash requires the allocation to border unmapped memory, which is unlikely with the normal allocator.  The FIPS modules are not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2026-9076","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9076","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-9076","date":"2026-10-08","epss":0.00973,"percentile":0.60827}],"urls":["https://github.com/openssl/openssl/commit/05b066366842f930fadd9a6e94df98030af431bb","https://github.com/openssl/openssl/commit/3d8d5bc1056b2f62da9fede23fedbf47e85187b0","https://github.com/openssl/openssl/commit/715349a1d7c6db970e6815dafb90915f07307f98","https://github.com/openssl/openssl/commit/77bf00ab13f6ff5e516535432f0328ed70ec0c26","https://github.com/openssl/openssl/commit/eecbe330977e8d023aae1ca2d9bdbe983ef3fdc6","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9076","description":"Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker's PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.30"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-21945","versionConstraint":"< 1.8.0_482||>= 1.9, < 8.0.482||>= 12, < 17.0.18||>= 18, < 21.0.10||>= 22, < 25.0.2||>= 9, < 11.0.30 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-21945","fix":{"state":"fixed","versions":["1.8.0_482","8.0.482","11.0.30","17.0.18","21.0.10","25.0.2"],"available":[{"date":"2026-01-27","kind":"first-observed","version":"1.8.0_482"},{"date":"2026-01-27","kind":"first-observed","version":"8.0.482"},{"date":"2026-01-27","kind":"first-observed","version":"17.0.18"},{"date":"2026-01-27","kind":"first-observed","version":"21.0.10"},{"date":"2026-01-27","kind":"first-observed","version":"25.0.2"},{"date":"2026-01-27","kind":"first-observed","version":"11.0.30"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-21945","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-21945","cwe":"CWE-295","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-21945","date":"2026-10-08","epss":0.0097,"percentile":0.60726}],"risk":0.7275,"urls":["https://www.oracle.com/security-alerts/cpujan2026.html","https://access.redhat.com/errata/RHSA-2026:0847","https://access.redhat.com/errata/RHSA-2026:0848","https://access.redhat.com/errata/RHSA-2026:0895","https://access.redhat.com/errata/RHSA-2026:0897","https://access.redhat.com/errata/RHSA-2026:0899","https://access.redhat.com/errata/RHSA-2026:0901","https://access.redhat.com/errata/RHSA-2026:0927","https://access.redhat.com/errata/RHSA-2026:0928","https://access.redhat.com/errata/RHSA-2026:0931","https://access.redhat.com/errata/RHSA-2026:0932","https://access.redhat.com/errata/RHSA-2026:0933","https://access.redhat.com/errata/RHSA-2026:1606","https://access.redhat.com/errata/RHSA-2026:4832","https://access.redhat.com/security/cve/CVE-2026-21945","https://bugzilla.redhat.com/show_bug.cgi?id=2429927","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21945.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-21945","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."},"relatedVulnerabilities":[]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.22"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-22081","versionConstraint":"< 1.8.0_392||>= 1.9, < 8.0.392||>= 12, < 17.0.9||>= 18, < 21.0.1||>= 9, < 11.0.22 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-22081","fix":{"state":"fixed","versions":["1.8.0_392","8.0.392","11.0.22","17.0.9","21.0.1"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_392"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.392"},{"date":"2025-09-04","kind":"first-observed","version":"17.0.9"},{"date":"2025-09-04","kind":"first-observed","version":"21.0.1"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.22"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-22081","date":"2026-10-08","epss":0.01412,"percentile":0.71878}],"risk":0.72718,"urls":["https://lists.debian.org/debian-lts-announce/2023/10/msg00041.html","https://security.netapp.com/advisory/ntap-20231027-0006/","https://www.debian.org/security/2023/dsa-5537","https://www.debian.org/security/2023/dsa-5548","https://www.oracle.com/security-alerts/cpuoct2023.html","https://security.netapp.com/advisory/ntap-20241108-0002/","https://openjdk.org/groups/vulnerability/advisories/2023-10-17"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-22081","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."},"relatedVulnerabilities":[]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-69421","versionConstraint":"< 1.1.1w-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-69421","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u5"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69421","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69421","date":"2026-10-08","epss":0.00958,"percentile":0.60302}],"risk":0.7185,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-69421","description":"Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function.  Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files.  The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure.  Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue."},"relatedVulnerabilities":[{"id":"CVE-2025-69421","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69421","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69421","date":"2026-10-08","epss":0.00958,"percentile":0.60302}],"urls":["https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b","https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7","https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd","https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3","https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69421","description":"Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-69421","versionConstraint":"< 1.1.1w-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-69421","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u5"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69421","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69421","date":"2026-10-08","epss":0.00958,"percentile":0.60302}],"risk":0.7185,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-69421","description":"Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function.  Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files.  The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure.  Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue."},"relatedVulnerabilities":[{"id":"CVE-2025-69421","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69421","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69421","date":"2026-10-08","epss":0.00958,"percentile":0.60302}],"urls":["https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b","https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7","https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd","https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3","https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69421","description":"Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue."}]},{"artifact":{"id":"fea2584e9beef935","cpes":["cpe:2.3:a:libncurses6:libncurses6:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*"],"name":"libncurses6","purl":"pkg:deb/debian/libncurses6@6.2%2B20201114-2%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=ncurses","type":"deb","version":"6.2+20201114-2+deb11u1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libncurses6:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libncurses6:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/libtinfo6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libncurses6/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"fix":{"suggestedVersion":"6.2+20201114-2+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-29491","versionConstraint":"< 6.2+20201114-2+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"ncurses","version":"6.2+20201114-2+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-29491","fix":{"state":"fixed","versions":["6.2+20201114-2+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"6.2+20201114-2+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29491","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29491","date":"2026-10-08","epss":0.00931,"percentile":0.59426}],"risk":0.712215,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable."},"relatedVulnerabilities":[{"id":"CVE-2023-29491","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29491","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29491","date":"2026-10-08","epss":0.00931,"percentile":0.59426}],"urls":["http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56","http://www.openwall.com/lists/oss-security/2023/04/19/10","http://www.openwall.com/lists/oss-security/2023/04/19/11","https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://security.netapp.com/advisory/ntap-20230517-0009/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845","https://www.openwall.com/lists/oss-security/2023/04/12/5","https://www.openwall.com/lists/oss-security/2023/04/13/4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable."}]},{"artifact":{"id":"6182dcee381f9d92","cpes":["cpe:2.3:a:libncursesw6:libncursesw6:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*"],"name":"libncursesw6","purl":"pkg:deb/debian/libncursesw6@6.2%2B20201114-2%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=ncurses","type":"deb","version":"6.2+20201114-2+deb11u1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libncursesw6:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libncursesw6:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/libtinfo6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libncursesw6/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"fix":{"suggestedVersion":"6.2+20201114-2+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-29491","versionConstraint":"< 6.2+20201114-2+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"ncurses","version":"6.2+20201114-2+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-29491","fix":{"state":"fixed","versions":["6.2+20201114-2+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"6.2+20201114-2+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29491","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29491","date":"2026-10-08","epss":0.00931,"percentile":0.59426}],"risk":0.712215,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable."},"relatedVulnerabilities":[{"id":"CVE-2023-29491","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29491","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29491","date":"2026-10-08","epss":0.00931,"percentile":0.59426}],"urls":["http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56","http://www.openwall.com/lists/oss-security/2023/04/19/10","http://www.openwall.com/lists/oss-security/2023/04/19/11","https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://security.netapp.com/advisory/ntap-20230517-0009/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845","https://www.openwall.com/lists/oss-security/2023/04/12/5","https://www.openwall.com/lists/oss-security/2023/04/13/4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable."}]},{"artifact":{"id":"945144abaa7803e2","cpes":["cpe:2.3:a:libtinfo6:libtinfo6:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*"],"name":"libtinfo6","purl":"pkg:deb/debian/libtinfo6@6.2%2B20201114-2%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=ncurses","type":"deb","version":"6.2+20201114-2+deb11u1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtinfo6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libtinfo6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtinfo6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libtinfo6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"fix":{"suggestedVersion":"6.2+20201114-2+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-29491","versionConstraint":"< 6.2+20201114-2+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"ncurses","version":"6.2+20201114-2+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-29491","fix":{"state":"fixed","versions":["6.2+20201114-2+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"6.2+20201114-2+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29491","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29491","date":"2026-10-08","epss":0.00931,"percentile":0.59426}],"risk":0.712215,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable."},"relatedVulnerabilities":[{"id":"CVE-2023-29491","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29491","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29491","date":"2026-10-08","epss":0.00931,"percentile":0.59426}],"urls":["http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56","http://www.openwall.com/lists/oss-security/2023/04/19/10","http://www.openwall.com/lists/oss-security/2023/04/19/11","https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://security.netapp.com/advisory/ntap-20230517-0009/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845","https://www.openwall.com/lists/oss-security/2023/04/12/5","https://www.openwall.com/lists/oss-security/2023/04/13/4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable."}]},{"artifact":{"id":"b46c40bd552e17f7","cpes":["cpe:2.3:a:ncurses-base:ncurses-base:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-base:ncurses_base:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses-base:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses_base:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-base:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_base:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*"],"name":"ncurses-base","purl":"pkg:deb/debian/ncurses-base@6.2%2B20201114-2%2Bdeb11u1?arch=all&distro=debian-11.7&upstream=ncurses","type":"deb","version":"6.2+20201114-2+deb11u1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/ncurses-base/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/ncurses-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-base.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/ncurses-base.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-base.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/ncurses-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-base.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/ncurses-base.list"}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"fix":{"suggestedVersion":"6.2+20201114-2+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-29491","versionConstraint":"< 6.2+20201114-2+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"ncurses","version":"6.2+20201114-2+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-29491","fix":{"state":"fixed","versions":["6.2+20201114-2+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"6.2+20201114-2+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29491","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29491","date":"2026-10-08","epss":0.00931,"percentile":0.59426}],"risk":0.712215,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable."},"relatedVulnerabilities":[{"id":"CVE-2023-29491","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29491","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29491","date":"2026-10-08","epss":0.00931,"percentile":0.59426}],"urls":["http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56","http://www.openwall.com/lists/oss-security/2023/04/19/10","http://www.openwall.com/lists/oss-security/2023/04/19/11","https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://security.netapp.com/advisory/ntap-20230517-0009/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845","https://www.openwall.com/lists/oss-security/2023/04/12/5","https://www.openwall.com/lists/oss-security/2023/04/13/4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable."}]},{"artifact":{"id":"0c53b7825fe163e0","cpes":["cpe:2.3:a:ncurses-bin:ncurses-bin:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-bin:ncurses_bin:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_bin:ncurses-bin:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_bin:ncurses_bin:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-bin:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_bin:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*"],"name":"ncurses-bin","purl":"pkg:deb/debian/ncurses-bin@6.2%2B20201114-2%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=ncurses","type":"deb","version":"6.2+20201114-2+deb11u1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/ncurses-bin/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/ncurses-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-bin.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/ncurses-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-bin.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/ncurses-bin.list"}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"fix":{"suggestedVersion":"6.2+20201114-2+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-29491","versionConstraint":"< 6.2+20201114-2+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"ncurses","version":"6.2+20201114-2+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-29491","fix":{"state":"fixed","versions":["6.2+20201114-2+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"6.2+20201114-2+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29491","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29491","date":"2026-10-08","epss":0.00931,"percentile":0.59426}],"risk":0.712215,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable."},"relatedVulnerabilities":[{"id":"CVE-2023-29491","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29491","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29491","date":"2026-10-08","epss":0.00931,"percentile":0.59426}],"urls":["http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56","http://www.openwall.com/lists/oss-security/2023/04/19/10","http://www.openwall.com/lists/oss-security/2023/04/19/11","https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://security.netapp.com/advisory/ntap-20230517-0009/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845","https://www.openwall.com/lists/oss-security/2023/04/12/5","https://www.openwall.com/lists/oss-security/2023/04/13/4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-29491","description":"ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable."}]},{"artifact":{"id":"c7ce262e92fd9b87","cpes":["cpe:2.3:a:bsdutils:bsdutils:1\\:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*"],"name":"bsdutils","purl":"pkg:deb/debian/bsdutils@1%3A2.36.1-8%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=util-linux%402.36.1-8%2Bdeb11u1","type":"deb","version":"1:2.36.1-8+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/bsdutils/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/bsdutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/bsdutils.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/bsdutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/bsdutils.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/bsdutils.list"}],"upstreams":[{"name":"util-linux","version":"2.36.1-8+deb11u1"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.36.1-8+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.36.1-8+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"util-linux","version":"2.36.1-8+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.36.1-8+deb11u2"],"available":[{"date":"2024-03-31","kind":"advisory","version":"2.36.1-8+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":0.7062299999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5650-1","link":"https://security-tracker.debian.org/tracker/DSA-5650-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"401183ca577ef8ff","cpes":["cpe:2.3:a:libblkid1:libblkid1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*"],"name":"libblkid1","purl":"pkg:deb/debian/libblkid1@2.36.1-8%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=util-linux","type":"deb","version":"2.36.1-8+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libblkid1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libblkid1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libblkid1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libblkid1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.36.1-8+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.36.1-8+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"util-linux","version":"2.36.1-8+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.36.1-8+deb11u2"],"available":[{"date":"2024-03-31","kind":"advisory","version":"2.36.1-8+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":0.7062299999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5650-1","link":"https://security-tracker.debian.org/tracker/DSA-5650-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"6cda43429b5a8cc2","cpes":["cpe:2.3:a:libmount1:libmount1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*"],"name":"libmount1","purl":"pkg:deb/debian/libmount1@2.36.1-8%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=util-linux","type":"deb","version":"2.36.1-8+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmount1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libmount1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmount1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libmount1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.36.1-8+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.36.1-8+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"util-linux","version":"2.36.1-8+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.36.1-8+deb11u2"],"available":[{"date":"2024-03-31","kind":"advisory","version":"2.36.1-8+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":0.7062299999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5650-1","link":"https://security-tracker.debian.org/tracker/DSA-5650-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"b40453ffcc53109f","cpes":["cpe:2.3:a:libsmartcols1:libsmartcols1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*"],"name":"libsmartcols1","purl":"pkg:deb/debian/libsmartcols1@2.36.1-8%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=util-linux","type":"deb","version":"2.36.1-8+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsmartcols1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libsmartcols1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsmartcols1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libsmartcols1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.36.1-8+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.36.1-8+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"util-linux","version":"2.36.1-8+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.36.1-8+deb11u2"],"available":[{"date":"2024-03-31","kind":"advisory","version":"2.36.1-8+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":0.7062299999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5650-1","link":"https://security-tracker.debian.org/tracker/DSA-5650-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"57c5a6def9fc5d4a","cpes":["cpe:2.3:a:libuuid1:libuuid1:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*"],"name":"libuuid1","purl":"pkg:deb/debian/libuuid1@2.36.1-8%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=util-linux","type":"deb","version":"2.36.1-8+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libuuid1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libuuid1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libuuid1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libuuid1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.36.1-8+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.36.1-8+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"util-linux","version":"2.36.1-8+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.36.1-8+deb11u2"],"available":[{"date":"2024-03-31","kind":"advisory","version":"2.36.1-8+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":0.7062299999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5650-1","link":"https://security-tracker.debian.org/tracker/DSA-5650-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"194a146e10c169d3","cpes":["cpe:2.3:a:mount:mount:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*"],"name":"mount","purl":"pkg:deb/debian/mount@2.36.1-8%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=util-linux","type":"deb","version":"2.36.1-8+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mount/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/mount/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mount.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/mount.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mount.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/mount.list"}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.36.1-8+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.36.1-8+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"util-linux","version":"2.36.1-8+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.36.1-8+deb11u2"],"available":[{"date":"2024-03-31","kind":"advisory","version":"2.36.1-8+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":0.7062299999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5650-1","link":"https://security-tracker.debian.org/tracker/DSA-5650-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"1e52aa5dfec990a1","cpes":["cpe:2.3:a:util-linux:util-linux:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:util-linux:util_linux:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:util_linux:util-linux:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:util_linux:util_linux:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:util:util-linux:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:util:util_linux:2.36.1-8\\+deb11u1:*:*:*:*:*:*:*"],"name":"util-linux","purl":"pkg:deb/debian/util-linux@2.36.1-8%2Bdeb11u1?arch=amd64&distro=debian-11.7","type":"deb","version":"2.36.1-8+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/util-linux/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/util-linux/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/util-linux.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/util-linux.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/util-linux.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/util-linux.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/util-linux.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/util-linux.list"},{"path":"/var/lib/dpkg/info/util-linux.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/util-linux.postinst"},{"path":"/var/lib/dpkg/info/util-linux.postrm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/util-linux.postrm"},{"path":"/var/lib/dpkg/info/util-linux.prerm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/util-linux.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.36.1-8+deb11u2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.36.1-8+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"util-linux","version":"2.36.1-8+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.36.1-8+deb11u2"],"available":[{"date":"2024-03-31","kind":"advisory","version":"2.36.1-8+deb11u2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":0.7062299999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5650-1","link":"https://security-tracker.debian.org/tracker/DSA-5650-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"e974360838add45f","cpes":["cpe:2.3:a:golang:crypto:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4","type":"go-module","version":"v0.0.0-20220411220226-7b82a4e95df4","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.35.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hcg3-q754-cr77","versionConstraint":"<0.35.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.0.0-20220411220226-7b82a4e95df4"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-hcg3-q754-cr77","fix":{"state":"fixed","versions":["0.35.0"],"available":[{"date":"2025-04-15","kind":"first-observed","version":"0.35.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-22869","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-22869","date":"2026-10-08","epss":0.00939,"percentile":0.59727}],"risk":0.70425,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-22869","https://go.dev/cl/652135","https://go.dev/issue/71931","https://pkg.go.dev/vuln/GO-2025-3487","https://security.netapp.com/advisory/ntap-20250411-0010","https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22","https://go-review.googlesource.com/c/crypto/+/652135"],"severity":"High","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hcg3-q754-cr77","description":"golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange"},"relatedVulnerabilities":[{"id":"CVE-2025-22869","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-22869","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-22869","date":"2026-10-08","epss":0.00939,"percentile":0.59727}],"urls":["https://go.dev/cl/652135","https://go.dev/issue/71931","https://pkg.go.dev/vuln/GO-2025-3487","https://security.netapp.com/advisory/ntap-20250411-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-22869","description":"SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4330","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.13"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-4330","versionConstraint":"< 3.9.23||>= 3.10.0, < 3.10.18||>= 3.11.0, < 3.11.13||>= 3.12.0, < 3.12.11||>= 3.13.0, < 3.13.4||>= 3.14.0a1, < 3.14.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-4330","fix":{"state":"fixed","versions":["3.9.23","3.10.18","3.11.13","3.12.11","3.13.4","3.14.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.23"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.18"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0b3"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.23"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.18"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.13"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.4"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4330","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-4330","date":"2026-10-08","epss":0.00939,"percentile":0.59709}],"risk":0.70425,"urls":["https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f","https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da","https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9","https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a","https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e","https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a","https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a","https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01","https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1","https://github.com/python/cpython/issues/135034","https://github.com/python/cpython/pull/135037","https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4330","description":"Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of \"data\" or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information.\n\nNote that for Python 3.14 or later the default value of filter= changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links."},"relatedVulnerabilities":[]},{"artifact":{"id":"c0daed3064d1154d","cpes":["cpe:2.3:a:jenkins:script_security:1229.v4880b_b_e905a_6:*:*:*:*:jenkins:*:*"],"name":"script-security","purl":"pkg:maven/org.jenkins-ci.plugins/script-security@1229.v4880b_b_e905a_6","type":"jenkins-plugin","version":"1229.v4880b_b_e905a_6","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi:WEB-INF/lib/script-security.jar","manifestName":"","pomArtifactID":"script-security","archiveDigests":[{"value":"6d8dfb75093b8b8973af431a5fb129a91ce87525","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi:WEB-INF/lib/script-security.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1402.1405.vc96e74964250"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cfj9-2vgr-hpxp","versionConstraint":"<1402.1405.vc96e74964250 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:script-security","version":"1229.v4880b_b_e905a_6"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-cfj9-2vgr-hpxp","fix":{"state":"fixed","versions":["1402.1405.vc96e74964250"],"available":[{"date":"2026-09-26","kind":"first-observed","version":"1402.1405.vc96e74964250"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-57281","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-917","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-57281","date":"2026-10-08","epss":0.00923,"percentile":0.59191}],"risk":0.69225,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-57281","https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3793","https://access.redhat.com/security/cve/CVE-2026-57281","https://bugzilla.redhat.com/show_bug.cgi?id=2492200","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57281.json","https://access.redhat.com/errata/RHSA-2026:60239","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60259","https://github.com/jenkinsci/script-security-plugin/commit/c96e7496425031182b6fc11ef1c55b9ae4fa7cc2","https://github.com/jenkinsci/script-security-plugin/releases/tag/1402.1405.vc96e74964250"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cfj9-2vgr-hpxp","description":"Jenkins Script Security Plugin has a script security bypass vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2026-57281","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.5,"impactScore":6.1,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-57281","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-917","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-57281","date":"2026-10-08","epss":0.00923,"percentile":0.59191}],"urls":["https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3793","https://access.redhat.com/errata/RHSA-2026:60239","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60259","https://access.redhat.com/security/cve/CVE-2026-57281","https://bugzilla.redhat.com/show_bug.cgi?id=2492200","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57281.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-57281","description":"Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sandboxed Groovy scripts to execute code outside the sandbox if a suitable script is present on the classpath of the component that evaluates the script."}]},{"artifact":{"id":"b2411ec8fb88df55","cpes":["cpe:2.3:a:jenkins:script_security:1229.v4880b_b_e905a_6:*:*:*:*:jenkins:*:*"],"name":"script-security","purl":"pkg:maven/org.jenkins-ci.plugins/script-security@1229.v4880b_b_e905a_6","type":"jenkins-plugin","version":"1229.v4880b_b_e905a_6","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi","manifestName":"","pomArtifactID":"script-security","archiveDigests":[{"value":"f5a6c17576cd9f3696165cbfaa0baed021749866","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/script-security.hpi","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1402.1405.vc96e74964250"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cfj9-2vgr-hpxp","versionConstraint":"<1402.1405.vc96e74964250 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:script-security","version":"1229.v4880b_b_e905a_6"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-cfj9-2vgr-hpxp","fix":{"state":"fixed","versions":["1402.1405.vc96e74964250"],"available":[{"date":"2026-09-26","kind":"first-observed","version":"1402.1405.vc96e74964250"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-57281","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-917","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-57281","date":"2026-10-08","epss":0.00923,"percentile":0.59191}],"risk":0.69225,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-57281","https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3793","https://access.redhat.com/security/cve/CVE-2026-57281","https://bugzilla.redhat.com/show_bug.cgi?id=2492200","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57281.json","https://access.redhat.com/errata/RHSA-2026:60239","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60259","https://github.com/jenkinsci/script-security-plugin/commit/c96e7496425031182b6fc11ef1c55b9ae4fa7cc2","https://github.com/jenkinsci/script-security-plugin/releases/tag/1402.1405.vc96e74964250"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cfj9-2vgr-hpxp","description":"Jenkins Script Security Plugin has a script security bypass vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2026-57281","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.5,"impactScore":6.1,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-57281","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-917","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-57281","date":"2026-10-08","epss":0.00923,"percentile":0.59191}],"urls":["https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3793","https://access.redhat.com/errata/RHSA-2026:60239","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60259","https://access.redhat.com/security/cve/CVE-2026-57281","https://bugzilla.redhat.com/show_bug.cgi?id=2492200","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57281.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-57281","description":"Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sandboxed Groovy scripts to execute code outside the sandbox if a suitable script is present on the classpath of the component that evaluates the script."}]},{"artifact":{"id":"5ed561949ce983e6","cpes":["cpe:2.3:a:jenkins:script_security:1251.vfe552ed55f8d:*:*:*:*:jenkins:*:*"],"name":"script-security","purl":"pkg:maven/org.jenkins-ci.plugins/script-security@1251.vfe552ed55f8d","type":"jenkins-plugin","version":"1251.vfe552ed55f8d","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/ref/plugins/script-security.jpi:WEB-INF/lib/script-security.jar","manifestName":"","pomArtifactID":"script-security","archiveDigests":[{"value":"6f4f72f48a7527e123dc206911afa1f7841067e6","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/script-security.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/script-security.jpi:WEB-INF/lib/script-security.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1402.1405.vc96e74964250"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cfj9-2vgr-hpxp","versionConstraint":"<1402.1405.vc96e74964250 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:script-security","version":"1251.vfe552ed55f8d"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-cfj9-2vgr-hpxp","fix":{"state":"fixed","versions":["1402.1405.vc96e74964250"],"available":[{"date":"2026-09-26","kind":"first-observed","version":"1402.1405.vc96e74964250"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-57281","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-917","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-57281","date":"2026-10-08","epss":0.00923,"percentile":0.59191}],"risk":0.69225,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-57281","https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3793","https://access.redhat.com/security/cve/CVE-2026-57281","https://bugzilla.redhat.com/show_bug.cgi?id=2492200","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57281.json","https://access.redhat.com/errata/RHSA-2026:60239","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60259","https://github.com/jenkinsci/script-security-plugin/commit/c96e7496425031182b6fc11ef1c55b9ae4fa7cc2","https://github.com/jenkinsci/script-security-plugin/releases/tag/1402.1405.vc96e74964250"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cfj9-2vgr-hpxp","description":"Jenkins Script Security Plugin has a script security bypass vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2026-57281","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.5,"impactScore":6.1,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-57281","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-917","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-57281","date":"2026-10-08","epss":0.00923,"percentile":0.59191}],"urls":["https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3793","https://access.redhat.com/errata/RHSA-2026:60239","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60259","https://access.redhat.com/security/cve/CVE-2026-57281","https://bugzilla.redhat.com/show_bug.cgi?id=2492200","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57281.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-57281","description":"Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sandboxed Groovy scripts to execute code outside the sandbox if a suitable script is present on the classpath of the component that evaluates the script."}]},{"artifact":{"id":"3c306f976d280b39","cpes":["cpe:2.3:a:jenkins:script_security:1251.vfe552ed55f8d:*:*:*:*:jenkins:*:*"],"name":"script-security","purl":"pkg:maven/org.jenkins-ci.plugins/script-security@1251.vfe552ed55f8d","type":"jenkins-plugin","version":"1251.vfe552ed55f8d","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/ref/plugins/script-security.jpi","manifestName":"","pomArtifactID":"script-security","archiveDigests":[{"value":"c8522b7ee175ee07e9b77976b7347f964421725c","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/script-security.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/script-security.jpi","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1402.1405.vc96e74964250"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cfj9-2vgr-hpxp","versionConstraint":"<1402.1405.vc96e74964250 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:script-security","version":"1251.vfe552ed55f8d"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-cfj9-2vgr-hpxp","fix":{"state":"fixed","versions":["1402.1405.vc96e74964250"],"available":[{"date":"2026-09-26","kind":"first-observed","version":"1402.1405.vc96e74964250"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-57281","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-917","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-57281","date":"2026-10-08","epss":0.00923,"percentile":0.59191}],"risk":0.69225,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-57281","https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3793","https://access.redhat.com/security/cve/CVE-2026-57281","https://bugzilla.redhat.com/show_bug.cgi?id=2492200","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57281.json","https://access.redhat.com/errata/RHSA-2026:60239","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60259","https://github.com/jenkinsci/script-security-plugin/commit/c96e7496425031182b6fc11ef1c55b9ae4fa7cc2","https://github.com/jenkinsci/script-security-plugin/releases/tag/1402.1405.vc96e74964250"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cfj9-2vgr-hpxp","description":"Jenkins Script Security Plugin has a script security bypass vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2026-57281","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.5,"impactScore":6.1,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-57281","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-57281","cwe":"CWE-917","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-57281","date":"2026-10-08","epss":0.00923,"percentile":0.59191}],"urls":["https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3793","https://access.redhat.com/errata/RHSA-2026:60239","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60259","https://access.redhat.com/security/cve/CVE-2026-57281","https://bugzilla.redhat.com/show_bug.cgi?id=2492200","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57281.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-57281","description":"Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sandboxed Groovy scripts to execute code outside the sandbox if a suitable script is present on the classpath of the component that evaluates the script."}]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5981","versionConstraint":"< 3.7.1-5+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-5981","fix":{"state":"fixed","versions":["3.7.1-5+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"3.7.1-5+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5981","cwe":"CWE-208","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5981","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5981","date":"2026-10-08","epss":0.01267,"percentile":0.68897}],"risk":0.6905150000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-5981","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding."},"relatedVulnerabilities":[{"id":"CVE-2023-5981","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5981","cwe":"CWE-208","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5981","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5981","date":"2026-10-08","epss":0.01267,"percentile":0.68897}],"urls":["https://access.redhat.com/errata/RHSA-2024:0155","https://access.redhat.com/errata/RHSA-2024:0319","https://access.redhat.com/errata/RHSA-2024:0399","https://access.redhat.com/errata/RHSA-2024:0451","https://access.redhat.com/errata/RHSA-2024:0533","https://access.redhat.com/errata/RHSA-2024:1383","https://access.redhat.com/errata/RHSA-2024:2094","https://access.redhat.com/security/cve/CVE-2023-5981","https://bugzilla.redhat.com/show_bug.cgi?id=2248445","https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23","http://www.openwall.com/lists/oss-security/2024/01/19/3","https://lists.debian.org/debian-lts-announce/2023/11/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5981","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63072","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-63072","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-08","epss":0.00916,"percentile":0.58982}],"risk":0.6869999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-63072","description":"Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write.  Impact summary: An attacker who supplies a crafted CMS message can trigger a deterministic 8-byte out-of-bounds heap write when the victim decrypts it with CMS_decrypt(), corrupting the heap and typically resulting in a Denial of Service.  CWE: CWE-787: Out-of-bounds Write  Description: The key-wrap OID is potentially attacker-controlled on the wire. CMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers. An attacker can take a legitimate message and change a single OID byte to select the padded variant while leaving the message otherwise valid. Since the unwrap key is derived from the recipient's private operation (ECDH key agreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot pass, and the decryption fails with integrity failure.  The write is a fixed-size (8-byte), fixed-value (zero) heap overflow immediately past the allocation, requires no special configuration, and is reachable from the public CMS_decrypt() function. The consequence is a heap corruption leading to a Denial of Service. The fix in the CMS code sizes the unwrap output buffer for the worst case so a failed unwrap cannot write past the allocation.  FIPS impact: no  As the CMS code lives outside the FIPS module boundary, no FIPS modules are affected by this CVE."},"relatedVulnerabilities":[{"id":"CVE-2026-63072","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-08","epss":0.00916,"percentile":0.58982}],"urls":["https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756","https://github.com/openssl/openssl/commit/87784ad619af36b8807c2044b3940006fccc1e42","https://github.com/openssl/openssl/commit/9530a5fd1aacaeccdced4478ea2340a480613335","https://github.com/openssl/openssl/commit/9ec2f6d2ae2bcad907cf7ee38584855bafe4979a","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63072","description":"Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\ncan write and cleanse more bytes than that query reports, causing an 8-byte\nout-of-bounds heap write.\n\nImpact summary: An attacker who supplies a crafted CMS message can trigger a\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\nof Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: The key-wrap OID is potentially attacker-controlled on the wire.\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\nAn attacker can take a legitimate message and change a single OID byte to\nselect the padded variant while leaving the message otherwise valid. Since\nthe unwrap key is derived from the recipient's private operation (ECDH key\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\npass, and the decryption fails with integrity failure.\n\nThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\nimmediately past the allocation, requires no special configuration, and is\nreachable from the public CMS_decrypt() function. The consequence is\na heap corruption leading to a Denial of Service. The fix in the CMS code\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot\nwrite past the allocation.\n\nFIPS impact: no\n\nAs the CMS code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-63072","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-63072","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-08","epss":0.00916,"percentile":0.58982}],"risk":0.6869999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-63072","description":"Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write.  Impact summary: An attacker who supplies a crafted CMS message can trigger a deterministic 8-byte out-of-bounds heap write when the victim decrypts it with CMS_decrypt(), corrupting the heap and typically resulting in a Denial of Service.  CWE: CWE-787: Out-of-bounds Write  Description: The key-wrap OID is potentially attacker-controlled on the wire. CMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers. An attacker can take a legitimate message and change a single OID byte to select the padded variant while leaving the message otherwise valid. Since the unwrap key is derived from the recipient's private operation (ECDH key agreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot pass, and the decryption fails with integrity failure.  The write is a fixed-size (8-byte), fixed-value (zero) heap overflow immediately past the allocation, requires no special configuration, and is reachable from the public CMS_decrypt() function. The consequence is a heap corruption leading to a Denial of Service. The fix in the CMS code sizes the unwrap output buffer for the worst case so a failed unwrap cannot write past the allocation.  FIPS impact: no  As the CMS code lives outside the FIPS module boundary, no FIPS modules are affected by this CVE."},"relatedVulnerabilities":[{"id":"CVE-2026-63072","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-08","epss":0.00916,"percentile":0.58982}],"urls":["https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756","https://github.com/openssl/openssl/commit/87784ad619af36b8807c2044b3940006fccc1e42","https://github.com/openssl/openssl/commit/9530a5fd1aacaeccdced4478ea2340a480613335","https://github.com/openssl/openssl/commit/9ec2f6d2ae2bcad907cf7ee38584855bafe4979a","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63072","description":"Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\ncan write and cleanse more bytes than that query reports, causing an 8-byte\nout-of-bounds heap write.\n\nImpact summary: An attacker who supplies a crafted CMS message can trigger a\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\nof Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: The key-wrap OID is potentially attacker-controlled on the wire.\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\nAn attacker can take a legitimate message and change a single OID byte to\nselect the padded variant while leaving the message otherwise valid. Since\nthe unwrap key is derived from the recipient's private operation (ECDH key\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\npass, and the decryption fails with integrity failure.\n\nThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\nimmediately past the allocation, requires no special configuration, and is\nreachable from the public CMS_decrypt() function. The consequence is\na heap corruption leading to a Denial of Service. The fix in the CMS code\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot\nwrite past the allocation.\n\nFIPS impact: no\n\nAs the CMS code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.22"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-20918","versionConstraint":"< 1.8.0_402||>= 1.9, < 8.0.402||>= 12, < 17.0.10||>= 18, < 21.0.2||>= 9, < 11.0.22 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-20918","fix":{"state":"fixed","versions":["1.8.0_402","8.0.402","11.0.22","17.0.10","21.0.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_402"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.402"},{"date":"2025-09-04","kind":"first-observed","version":"17.0.10"},{"date":"2025-09-04","kind":"first-observed","version":"21.0.2"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.22"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-20918","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-20918","date":"2026-10-08","epss":0.00918,"percentile":0.5903}],"risk":0.68391,"urls":["https://lists.debian.org/debian-lts-announce/2024/01/msg00023.html","https://security.netapp.com/advisory/ntap-20240201-0002/","https://www.oracle.com/security-alerts/cpujan2024.html","https://security.netapp.com/advisory/ntap-20241108-0002/","https://openjdk.org/groups/vulnerability/advisories/2024-01-16"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-20918","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.22"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-20952","versionConstraint":"< 1.8.0_402||>= 1.9, < 8.0.402||>= 12, < 17.0.10||>= 18, < 21.0.2||>= 9, < 11.0.22 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-20952","fix":{"state":"fixed","versions":["1.8.0_402","8.0.402","11.0.22","17.0.10","21.0.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_402"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.402"},{"date":"2025-09-04","kind":"first-observed","version":"17.0.10"},{"date":"2025-09-04","kind":"first-observed","version":"21.0.2"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.22"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-20952","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-20952","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-20952","date":"2026-10-08","epss":0.00918,"percentile":0.5903}],"risk":0.68391,"urls":["https://lists.debian.org/debian-lts-announce/2024/01/msg00023.html","https://security.netapp.com/advisory/ntap-20240201-0002/","https://www.oracle.com/security-alerts/cpujan2024.html","https://security.netapp.com/advisory/ntap-20241108-0002/","https://openjdk.org/groups/vulnerability/advisories/2024-01-16"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-20952","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"8a6a22d9215bf019","cpes":["cpe:2.3:a:com.squareup.okio:okio:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:squareup:okio:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:okio:okio:3.3.0:*:*:*:*:*:*:*"],"name":"okio","purl":"pkg:maven/com.squareup.okio/okio@3.3.0","type":"java-archive","version":"3.3.0","language":"java","licenses":[],"metadata":{"pomGroupID":"com.squareup.okio","virtualPath":"/usr/share/jenkins/ref/plugins/okhttp-api.jpi:WEB-INF/lib/okio-3.3.0.jar","manifestName":"","pomArtifactID":"okio","archiveDigests":[{"value":"c3ad4568143c88518e82eb63de30e2d3de011439","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/okhttp-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/okhttp-api.jpi:WEB-INF/lib/okio-3.3.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.4.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-w33c-445m-f8w7","versionConstraint":">=2.0.0-RC1,<3.4.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.squareup.okio:okio","version":"3.3.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-w33c-445m-f8w7","fix":{"state":"fixed","versions":["3.4.0"],"available":[{"date":"2023-07-17","kind":"first-observed","version":"3.4.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3635","cwe":"CWE-195","type":"Secondary","source":"reefs@jfrog.com"},{"cve":"CVE-2023-3635","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3635","date":"2026-10-08","epss":0.01254,"percentile":0.6859}],"risk":0.6834300000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-3635","https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b","https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/","https://github.com/square/okio/pull/1280","https://github.com/square/okio/pull/1334","https://github.com/square/okio/commit/b4fa875dc24950680c386e4b1c593660ce4f7839","https://github.com/square/okio/blob/master/CHANGELOG.md#version-1176"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-w33c-445m-f8w7","description":"Okio Signed to Unsigned Conversion Error vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-3635","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"reefs@jfrog.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3635","cwe":"CWE-195","type":"Secondary","source":"reefs@jfrog.com"},{"cve":"CVE-2023-3635","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3635","date":"2026-10-08","epss":0.01254,"percentile":0.6859}],"urls":["https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b","https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3635","description":"GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class."}]},{"artifact":{"id":"dbef99a28ce9f72f","cpes":["cpe:2.3:a:com.squareup.okio:okio-jvm:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:com.squareup.okio:okio_jvm:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:com.squareup.okio:okio:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:okio-jvm:okio-jvm:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:okio-jvm:okio_jvm:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:okio_jvm:okio-jvm:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:okio_jvm:okio_jvm:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:squareup:okio-jvm:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:squareup:okio_jvm:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:okio-jvm:okio:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:okio:okio-jvm:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:okio:okio_jvm:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:okio_jvm:okio:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:squareup:okio:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:okio:okio:3.3.0:*:*:*:*:*:*:*"],"name":"okio-jvm","purl":"pkg:maven/com.squareup.okio/okio-jvm@3.3.0","type":"java-archive","version":"3.3.0","language":"java","licenses":[],"metadata":{"pomGroupID":"com.squareup.okio","virtualPath":"/usr/share/jenkins/ref/plugins/okhttp-api.jpi:WEB-INF/lib/okio-jvm-3.3.0.jar","manifestName":"","pomArtifactID":"okio-jvm","archiveDigests":[{"value":"2d175add2d06a67bda111ae5455e49b42d0bb287","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/okhttp-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/okhttp-api.jpi:WEB-INF/lib/okio-jvm-3.3.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.4.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-w33c-445m-f8w7","versionConstraint":">=2.0.0-RC1,<3.4.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.squareup.okio:okio-jvm","version":"3.3.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-w33c-445m-f8w7","fix":{"state":"fixed","versions":["3.4.0"],"available":[{"date":"2023-11-28","kind":"first-observed","version":"3.4.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3635","cwe":"CWE-195","type":"Secondary","source":"reefs@jfrog.com"},{"cve":"CVE-2023-3635","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3635","date":"2026-10-08","epss":0.01254,"percentile":0.6859}],"risk":0.6834300000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-3635","https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b","https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/","https://github.com/square/okio/pull/1280","https://github.com/square/okio/pull/1334","https://github.com/square/okio/commit/b4fa875dc24950680c386e4b1c593660ce4f7839","https://github.com/square/okio/blob/master/CHANGELOG.md#version-1176"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-w33c-445m-f8w7","description":"Okio Signed to Unsigned Conversion Error vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-3635","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"reefs@jfrog.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3635","cwe":"CWE-195","type":"Secondary","source":"reefs@jfrog.com"},{"cve":"CVE-2023-3635","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3635","date":"2026-10-08","epss":0.01254,"percentile":0.6859}],"urls":["https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b","https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3635","description":"GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class."}]},{"artifact":{"id":"b2e77aa5ecffb7d4","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5450","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-5450","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-08","epss":0.00718,"percentile":0.52433}],"risk":0.6749200000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-5450","description":"Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow."},"relatedVulnerabilities":[{"id":"CVE-2026-5450","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-08","epss":0.00718,"percentile":0.52433}],"urls":["https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5450","description":"Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow."}]},{"artifact":{"id":"c2e60422a6017463","cpes":["cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5450","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-5450","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-08","epss":0.00718,"percentile":0.52433}],"risk":0.6749200000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-5450","description":"Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow."},"relatedVulnerabilities":[{"id":"CVE-2026-5450","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-08","epss":0.00718,"percentile":0.52433}],"urls":["https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5450","description":"Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-69420","versionConstraint":"< 1.1.1w-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-69420","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u5"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u5"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69420","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69420","date":"2026-10-08","epss":0.00899,"percentile":0.58405}],"risk":0.67425,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-69420","description":"Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file.  Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service.  The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash.  Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.  OpenSSL 1.0.2 is not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2025-69420","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69420","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69420","date":"2026-10-08","epss":0.00899,"percentile":0.58405}],"urls":["https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9","https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a","https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e","https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b","https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69420","description":"Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-69420","versionConstraint":"< 1.1.1w-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-69420","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u5"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u5"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69420","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69420","date":"2026-10-08","epss":0.00899,"percentile":0.58405}],"risk":0.67425,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-69420","description":"Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file.  Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service.  The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash.  Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity.  The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.  OpenSSL 1.0.2 is not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2025-69420","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69420","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69420","date":"2026-10-08","epss":0.00899,"percentile":0.58405}],"urls":["https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9","https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a","https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e","https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b","https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69420","description":"Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.21.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2024-2599","versionConstraint":"<1.21.8||>=1.22.0-0,<1.22.1 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2024-2599","fix":{"state":"fixed","versions":["1.21.8","1.22.1"],"available":[{"date":"2024-03-05","kind":"release","version":"1.21.8"},{"date":"2024-03-05","kind":"release","version":"1.22.1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45290","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-45290","date":"2026-10-08","epss":0.01165,"percentile":0.66334}],"risk":0.669875,"urls":["https://go.dev/cl/569341","https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/65383","description":"When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a maliciously crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory, potentially leading to memory exhaustion.\n\nWith fix, the ParseMultipartForm function now correctly limits the maximum size of form lines."},"relatedVulnerabilities":[{"id":"CVE-2023-45290","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45290","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-45290","date":"2026-10-08","epss":0.01165,"percentile":0.66334}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/08/4","https://go.dev/cl/569341","https://go.dev/issue/65383","https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg","https://pkg.go.dev/vuln/GO-2024-2599","https://security.netapp.com/advisory/ntap-20240329-0004/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-45290","description":"When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a maliciously crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory, potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits the maximum size of form lines."}]},{"artifact":{"id":"b14b9dda81b19a08","cpes":["cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2-14:libnghttp2_14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2_14:libnghttp2-14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2_14:libnghttp2_14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2:libnghttp2-14:1.43.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2:libnghttp2_14:1.43.0-1:*:*:*:*:*:*:*"],"name":"libnghttp2-14","purl":"pkg:deb/debian/libnghttp2-14@1.43.0-1?arch=amd64&distro=debian-11.7&upstream=nghttp2","type":"deb","version":"1.43.0-1","language":"","licenses":["BSD-2-clause","Expat","GPL-3","GPL-3+","MIT","SIL-OFL-1.1","all-permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libnghttp2-14/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libnghttp2-14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libnghttp2-14:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libnghttp2-14:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"nghttp2"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.43.0-1+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-27135","versionConstraint":"< 1.43.0-1+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"nghttp2","version":"1.43.0-1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-27135","fix":{"state":"fixed","versions":["1.43.0-1+deb11u3"],"available":[{"date":"2026-05-14","kind":"first-observed","version":"1.43.0-1+deb11u3"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27135","cwe":"CWE-617","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-27135","cwe":"CWE-617","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-27135","date":"2026-10-08","epss":0.00892,"percentile":0.58186}],"risk":0.669,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-27135","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available."},"relatedVulnerabilities":[{"id":"CVE-2026-27135","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27135","cwe":"CWE-617","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-27135","cwe":"CWE-617","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-27135","date":"2026-10-08","epss":0.00892,"percentile":0.58186}],"urls":["https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1","https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6","http://www.openwall.com/lists/oss-security/2026/03/20/3","https://lists.debian.org/debian-lts-announce/2026/05/msg00025.html","https://access.redhat.com/errata/RHSA-2026:10065","https://access.redhat.com/errata/RHSA-2026:11768","https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:14773","https://access.redhat.com/errata/RHSA-2026:14937","https://access.redhat.com/errata/RHSA-2026:15087","https://access.redhat.com/errata/RHSA-2026:16008","https://access.redhat.com/errata/RHSA-2026:16009","https://access.redhat.com/errata/RHSA-2026:16030","https://access.redhat.com/errata/RHSA-2026:16174","https://access.redhat.com/errata/RHSA-2026:17596","https://access.redhat.com/errata/RHSA-2026:19724","https://access.redhat.com/errata/RHSA-2026:19725","https://access.redhat.com/errata/RHSA-2026:20040","https://access.redhat.com/errata/RHSA-2026:20087","https://access.redhat.com/errata/RHSA-2026:21656","https://access.redhat.com/errata/RHSA-2026:21690","https://access.redhat.com/errata/RHSA-2026:21695","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:27200","https://access.redhat.com/errata/RHSA-2026:27201","https://access.redhat.com/errata/RHSA-2026:6190","https://access.redhat.com/errata/RHSA-2026:7080","https://access.redhat.com/errata/RHSA-2026:7123","https://access.redhat.com/errata/RHSA-2026:7302","https://access.redhat.com/errata/RHSA-2026:7310","https://access.redhat.com/errata/RHSA-2026:7350","https://access.redhat.com/errata/RHSA-2026:7666","https://access.redhat.com/errata/RHSA-2026:7667","https://access.redhat.com/errata/RHSA-2026:7668","https://access.redhat.com/errata/RHSA-2026:7670","https://access.redhat.com/errata/RHSA-2026:7675","https://access.redhat.com/errata/RHSA-2026:7896","https://access.redhat.com/errata/RHSA-2026:7983","https://access.redhat.com/errata/RHSA-2026:8339","https://access.redhat.com/errata/RHSA-2026:8538","https://access.redhat.com/errata/RHSA-2026:8539","https://access.redhat.com/errata/RHSA-2026:8540","https://access.redhat.com/errata/RHSA-2026:8541","https://access.redhat.com/errata/RHSA-2026:8545","https://access.redhat.com/errata/RHSA-2026:8546","https://access.redhat.com/errata/RHSA-2026:8547","https://access.redhat.com/errata/RHSA-2026:8548","https://access.redhat.com/errata/RHSA-2026:8868","https://access.redhat.com/errata/RHSA-2026:9711","https://access.redhat.com/errata/RHSA-2026:9832","https://access.redhat.com/errata/RHSA-2026:9874","https://access.redhat.com/security/cve/CVE-2026-27135","https://bugzilla.redhat.com/show_bug.cgi?id=2448754","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-27135","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.31"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-34282","versionConstraint":"< 1.8.0_492||>= 1.9, < 8.0.492||>= 12, < 17.0.19||>= 18, < 21.0.11||>= 22, < 25.0.3||>= 26, < 26.0.1||>= 9, < 11.0.31 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-34282","fix":{"state":"fixed","versions":["1.8.0_492","8.0.492","11.0.31","17.0.19","21.0.11","25.0.3","26.0.1"],"available":[{"date":"2026-04-24","kind":"first-observed","version":"1.8.0_492"},{"date":"2026-04-24","kind":"first-observed","version":"8.0.492"},{"date":"2026-04-24","kind":"first-observed","version":"17.0.19"},{"date":"2026-04-24","kind":"first-observed","version":"21.0.11"},{"date":"2026-04-24","kind":"first-observed","version":"25.0.3"},{"date":"2026-04-24","kind":"first-observed","version":"26.0.1"},{"date":"2026-04-24","kind":"first-observed","version":"11.0.31"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34282","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-34282","cwe":"CWE-835","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-34282","date":"2026-10-08","epss":0.00891,"percentile":0.58162}],"risk":0.6682499999999999,"urls":["https://www.oracle.com/security-alerts/cpuapr2026.html","https://access.redhat.com/errata/RHSA-2026:11403","https://access.redhat.com/errata/RHSA-2026:11655","https://access.redhat.com/errata/RHSA-2026:11822","https://access.redhat.com/errata/RHSA-2026:11829","https://access.redhat.com/errata/RHSA-2026:11902","https://access.redhat.com/errata/RHSA-2026:22328","https://access.redhat.com/errata/RHSA-2026:9254","https://access.redhat.com/errata/RHSA-2026:9686","https://access.redhat.com/errata/RHSA-2026:9687","https://access.redhat.com/errata/RHSA-2026:9688","https://access.redhat.com/errata/RHSA-2026:9689","https://access.redhat.com/errata/RHSA-2026:9691","https://access.redhat.com/errata/RHSA-2026:9693","https://access.redhat.com/errata/RHSA-2026:9694","https://access.redhat.com/security/cve/CVE-2026-34282","https://bugzilla.redhat.com/show_bug.cgi?id=2460044","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34282.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34282","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."},"relatedVulnerabilities":[]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-12243","versionConstraint":"< 3.7.1-5+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-12243","fix":{"state":"fixed","versions":["3.7.1-5+deb11u7"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"3.7.1-5+deb11u7"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-12243","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-12243","date":"2026-10-08","epss":0.01292,"percentile":0.69398}],"risk":0.66538,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-12243","description":"A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition."},"relatedVulnerabilities":[{"id":"CVE-2024-12243","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-12243","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-12243","date":"2026-10-08","epss":0.01292,"percentile":0.69398}],"urls":["https://access.redhat.com/errata/RHSA-2025:17361","https://access.redhat.com/errata/RHSA-2025:4051","https://access.redhat.com/errata/RHSA-2025:7076","https://access.redhat.com/errata/RHSA-2025:8020","https://access.redhat.com/errata/RHSA-2025:8385","https://access.redhat.com/security/cve/CVE-2024-12243","https://bugzilla.redhat.com/show_bug.cgi?id=2344615","https://gitlab.com/gnutls/gnutls/-/issues/1553","https://gitlab.com/gnutls/libtasn1/-/issues/52","https://lists.debian.org/debian-lts-announce/2025/02/msg00027.html","https://security.netapp.com/advisory/ntap-20250523-0002/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-12243","description":"A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition."}]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-3833","versionConstraint":"< 3.7.1-5+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-3833","fix":{"state":"fixed","versions":["3.7.1-5+deb11u10"],"available":[{"date":"2026-05-23","kind":"first-observed","version":"3.7.1-5+deb11u10"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3833","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3833","date":"2026-10-08","epss":0.00892,"percentile":0.58203}],"risk":0.6645400000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-3833","description":"A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-3833","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3833","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3833","date":"2026-10-08","epss":0.00892,"percentile":0.58203}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:57402","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:62409","https://access.redhat.com/errata/RHSA-2026:62549","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:65851","https://access.redhat.com/errata/RHSA-2026:67857","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-3833","https://bugzilla.redhat.com/show_bug.cgi?id=2445763","https://gitlab.com/gnutls/gnutls/-/issues/1803"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3833","description":"A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure."}]},{"artifact":{"id":"b2e77aa5ecffb7d4","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33600","versionConstraint":"< 2.31-13+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-33600","fix":{"state":"fixed","versions":["2.31-13+deb11u10"],"available":[{"date":"2024-05-03","kind":"advisory","version":"2.31-13+deb11u10"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-08","epss":0.01216,"percentile":0.67686}],"risk":0.6627200000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5678-1","link":"https://security-tracker.debian.org/tracker/DSA-5678-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-33600","description":"nscd: Null pointer crashes after notfound response  If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference.  This flaw was introduced in glibc 2.15 when the cache was added to nscd.  This vulnerability is only present in the nscd binary."},"relatedVulnerabilities":[{"id":"CVE-2024-33600","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-08","epss":0.01216,"percentile":0.67686}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0013/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33600","description":"nscd: Null pointer crashes after notfound response\n\nIf the Name Service Cache Daemon's (nscd) cache fails to add a not-found\nnetgroup response to the cache, the client request can result in a null\npointer dereference.  This flaw was introduced in glibc 2.15 when the\ncache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"c2e60422a6017463","cpes":["cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33600","versionConstraint":"< 2.31-13+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-33600","fix":{"state":"fixed","versions":["2.31-13+deb11u10"],"available":[{"date":"2024-05-03","kind":"advisory","version":"2.31-13+deb11u10"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-08","epss":0.01216,"percentile":0.67686}],"risk":0.6627200000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5678-1","link":"https://security-tracker.debian.org/tracker/DSA-5678-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-33600","description":"nscd: Null pointer crashes after notfound response  If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference.  This flaw was introduced in glibc 2.15 when the cache was added to nscd.  This vulnerability is only present in the nscd binary."},"relatedVulnerabilities":[{"id":"CVE-2024-33600","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-08","epss":0.01216,"percentile":0.67686}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0013/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33600","description":"nscd: Null pointer crashes after notfound response\n\nIf the Name Service Cache Daemon's (nscd) cache fails to add a not-found\nnetgroup response to the cache, the client request can result in a null\npointer dereference.  This flaw was introduced in glibc 2.15 when the\ncache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"25ad583843de9509","cpes":["cpe:2.3:a:org.eclipse.jetty:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-http:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-http:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_http:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_http:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-http:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_http:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty:10.0.15:*:*:*:*:*:*:*"],"name":"jetty-http","purl":"pkg:maven/org.eclipse.jetty/jetty-http@10.0.15","type":"java-archive","version":"10.0.15","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jetty","virtualPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar:org.eclipse.jetty:jetty-http","manifestName":"","pomArtifactID":"jetty-http","archiveDigests":null},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"10.0.16"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hmr7-m48g-48f6","versionConstraint":">=10.0.0,<=10.0.15 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jetty:jetty-http","version":"10.0.15"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-hmr7-m48g-48f6","fix":{"state":"fixed","versions":["10.0.16"],"available":[{"date":"2023-09-15","kind":"first-observed","version":"10.0.16"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-40167","cwe":"CWE-130","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-40167","date":"2026-10-08","epss":0.01279,"percentile":0.69122}],"risk":0.658685,"urls":["https://github.com/eclipse/jetty.project/security/advisories/GHSA-hmr7-m48g-48f6","https://www.rfc-editor.org/rfc/rfc9110#section-8.6","https://nvd.nist.gov/vuln/detail/CVE-2023-40167","https://www.debian.org/security/2023/dsa-5507","https://lists.debian.org/debian-lts-announce/2023/09/msg00039.html"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hmr7-m48g-48f6","description":"Jetty accepts \"+\" prefixed value in Content-Length"},"relatedVulnerabilities":[{"id":"CVE-2023-40167","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-40167","cwe":"CWE-130","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-40167","date":"2026-10-08","epss":0.01279,"percentile":0.69122}],"urls":["https://github.com/eclipse/jetty.project/security/advisories/GHSA-hmr7-m48g-48f6","https://lists.debian.org/debian-lts-announce/2023/09/msg00039.html","https://www.debian.org/security/2023/dsa-5507","https://www.rfc-editor.org/rfc/rfc9110#section-8.6"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-40167","description":"Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field.  This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses.  There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario."}]},{"artifact":{"id":"2a88897c46c4751f","cpes":["cpe:2.3:a:libperl5.32:libperl5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"libperl5.32","purl":"pkg:deb/debian/libperl5.32@5.32.1-4%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=perl","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libperl5.32/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libperl5.32/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libperl5.32:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libperl5.32:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.32.1-4+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-16156","versionConstraint":"< 5.32.1-4+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2020-16156","fix":{"state":"fixed","versions":["5.32.1-4+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"5.32.1-4+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-16156","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-16156","date":"2026-10-08","epss":0.00858,"percentile":0.57186}],"risk":0.65637,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2020-16156","description":"CPAN 2.28 allows Signature Verification Bypass."},"relatedVulnerabilities":[{"id":"CVE-2020-16156","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-16156","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-16156","date":"2026-10-08","epss":0.00858,"percentile":0.57186}],"urls":["http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html","https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/","https://metacpan.org/pod/distribution/CPAN/scripts/cpan","https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-16156","description":"CPAN 2.28 allows Signature Verification Bypass."}]},{"artifact":{"id":"ca766af4b1156087","cpes":["cpe:2.3:a:perl:perl:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"perl","purl":"pkg:deb/debian/perl@5.32.1-4%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/perl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.list"},{"path":"/var/lib/dpkg/info/perl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.postinst"},{"path":"/var/lib/dpkg/info/perl.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.postrm"},{"path":"/var/lib/dpkg/info/perl.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.preinst"},{"path":"/var/lib/dpkg/info/perl.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"5.32.1-4+deb11u4"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-16156","versionConstraint":"< 5.32.1-4+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2020-16156","fix":{"state":"fixed","versions":["5.32.1-4+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"5.32.1-4+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-16156","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-16156","date":"2026-10-08","epss":0.00858,"percentile":0.57186}],"risk":0.65637,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2020-16156","description":"CPAN 2.28 allows Signature Verification Bypass."},"relatedVulnerabilities":[{"id":"CVE-2020-16156","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-16156","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-16156","date":"2026-10-08","epss":0.00858,"percentile":0.57186}],"urls":["http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html","https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/","https://metacpan.org/pod/distribution/CPAN/scripts/cpan","https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-16156","description":"CPAN 2.28 allows Signature Verification Bypass."}]},{"artifact":{"id":"0132d68bd1bdb220","cpes":["cpe:2.3:a:perl-base:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=perl","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.32.1-4+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-16156","versionConstraint":"< 5.32.1-4+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2020-16156","fix":{"state":"fixed","versions":["5.32.1-4+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"5.32.1-4+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-16156","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-16156","date":"2026-10-08","epss":0.00858,"percentile":0.57186}],"risk":0.65637,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2020-16156","description":"CPAN 2.28 allows Signature Verification Bypass."},"relatedVulnerabilities":[{"id":"CVE-2020-16156","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-16156","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-16156","date":"2026-10-08","epss":0.00858,"percentile":0.57186}],"urls":["http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html","https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/","https://metacpan.org/pod/distribution/CPAN/scripts/cpan","https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-16156","description":"CPAN 2.28 allows Signature Verification Bypass."}]},{"artifact":{"id":"0e78a1cc7a598ddd","cpes":["cpe:2.3:a:perl-modules-5.32:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-modules-5.32:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules_5.32:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules_5.32:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-modules:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-modules:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"perl-modules-5.32","purl":"pkg:deb/debian/perl-modules-5.32@5.32.1-4%2Bdeb11u2?arch=all&distro=debian-11.7&upstream=perl","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-modules-5.32/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/perl-modules-5.32/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-modules-5.32.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl-modules-5.32.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-modules-5.32.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl-modules-5.32.list"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.32.1-4+deb11u4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-16156","versionConstraint":"< 5.32.1-4+deb11u4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2020-16156","fix":{"state":"fixed","versions":["5.32.1-4+deb11u4"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"5.32.1-4+deb11u4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-16156","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-16156","date":"2026-10-08","epss":0.00858,"percentile":0.57186}],"risk":0.65637,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2020-16156","description":"CPAN 2.28 allows Signature Verification Bypass."},"relatedVulnerabilities":[{"id":"CVE-2020-16156","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-16156","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-16156","date":"2026-10-08","epss":0.00858,"percentile":0.57186}],"urls":["http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html","https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/","https://metacpan.org/pod/distribution/CPAN/scripts/cpan","https://lists.debian.org/debian-lts-announce/2024/10/msg00017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-16156","description":"CPAN 2.28 allows Signature Verification Bypass."}]},{"artifact":{"id":"670f2b549790d4cb","cpes":["cpe:2.3:a:apache:sshd-common:2.9.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:sshd_common:2.9.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:sshd:2.9.2:*:*:*:*:*:*:*"],"name":"sshd-common","purl":"pkg:maven/org.apache.sshd/sshd-common@2.9.2","type":"java-archive","version":"2.9.2","language":"java","licenses":["Apache-2.0"],"metadata":{"pomGroupID":"org.apache.sshd","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/mina-sshd-api-common.hpi:WEB-INF/lib/sshd-common-2.9.2.jar","manifestName":"","pomArtifactID":"sshd-common","archiveDigests":[{"value":"9671e971cf1f05d221c0a86cecc165d88156c8ed","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/mina-sshd-api-common.hpi:WEB-INF/lib/sshd-common-2.9.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.9.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mjmq-gwgm-5qhm","versionConstraint":">=2.1.0,<2.9.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.sshd:sshd-common","version":"2.9.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-mjmq-gwgm-5qhm","fix":{"state":"fixed","versions":["2.9.3"],"available":[{"date":"2023-12-08","kind":"first-observed","version":"2.9.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","metrics":{"baseScore":5,"impactScore":1.5,"exploitabilityScore":3.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-35887","cwe":"CWE-22","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2023-35887","cwe":"CWE-22","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-35887","date":"2026-10-08","epss":0.01311,"percentile":0.69795}],"risk":0.6555,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-35887","https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2","https://github.com/apache/mina-sshd/pull/362","https://github.com/apache/mina-sshd/commit/a61e93035f06bff8fc622ad94870fb773d48b9f0","https://issues.apache.org/jira/browse/SSHD-1324","https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0","https://github.com/apache/mina-sshd/commit/c20739b43aab0f7bf2ccad982a6cb37b9d5a8a0b"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mjmq-gwgm-5qhm","description":"Apache MINA SSHD information disclosure vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-35887","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@apache.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","metrics":{"baseScore":5,"impactScore":1.5,"exploitabilityScore":3.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-35887","cwe":"CWE-22","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2023-35887","cwe":"CWE-22","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-35887","date":"2026-10-08","epss":0.01311,"percentile":0.69795}],"urls":["https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-35887","description":"Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.\n\nIn SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover \"exists/does not exist\" information about items outside the rooted tree via paths including parent navigation (\"..\") beyond the root, or involving symlinks.\n\nThis issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10"}]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-32990","versionConstraint":"< 3.7.1-5+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-32990","fix":{"state":"fixed","versions":["3.7.1-5+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"3.7.1-5+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32990","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32990","date":"2026-10-08","epss":0.00834,"percentile":0.56371}],"risk":0.65469,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-32990","description":"A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system."},"relatedVulnerabilities":[{"id":"CVE-2025-32990","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32990","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32990","date":"2026-10-08","epss":0.00834,"percentile":0.56371}],"urls":["https://access.redhat.com/errata/RHSA-2025:16115","https://access.redhat.com/errata/RHSA-2025:16116","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:17348","https://access.redhat.com/errata/RHSA-2025:17361","https://access.redhat.com/errata/RHSA-2025:17415","https://access.redhat.com/errata/RHSA-2025:19088","https://access.redhat.com/errata/RHSA-2025:22529","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/security/cve/CVE-2025-32990","https://bugzilla.redhat.com/show_bug.cgi?id=2359620","https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html","http://www.openwall.com/lists/oss-security/2025/07/11/3","https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-32990","description":"A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-27538","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27538","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27538","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27538","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27538","date":"2026-10-08","epss":0.01246,"percentile":0.68399}],"risk":0.65415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27538","description":"An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection."},"relatedVulnerabilities":[{"id":"CVE-2023-27538","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.7,"impactScore":5.2,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27538","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27538","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27538","date":"2026-10-08","epss":0.01246,"percentile":0.68399}],"urls":["https://hackerone.com/reports/1898475","https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27538","description":"An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-27538","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27538","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27538","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27538","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27538","date":"2026-10-08","epss":0.01246,"percentile":0.68399}],"risk":0.65415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27538","description":"An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection."},"relatedVulnerabilities":[{"id":"CVE-2023-27538","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.7,"impactScore":5.2,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27538","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27538","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27538","date":"2026-10-08","epss":0.01246,"percentile":0.68399}],"urls":["https://hackerone.com/reports/1898475","https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27538","description":"An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.74.0-1.3+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-27538","versionConstraint":"< 7.74.0-1.3+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-27538","fix":{"state":"fixed","versions":["7.74.0-1.3+deb11u8"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"7.74.0-1.3+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27538","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27538","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27538","date":"2026-10-08","epss":0.01246,"percentile":0.68399}],"risk":0.65415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-27538","description":"An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection."},"relatedVulnerabilities":[{"id":"CVE-2023-27538","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.7,"impactScore":5.2,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-27538","cwe":"CWE-305","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-27538","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-27538","date":"2026-10-08","epss":0.01246,"percentile":0.68399}],"urls":["https://hackerone.com/reports/1898475","https://lists.debian.org/debian-lts-announce/2023/04/msg00025.html","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230420-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-27538","description":"An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection."}]},{"artifact":{"id":"c3466eb679e28aa6","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A8.4p1-5%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=openssh","type":"deb","version":"1:8.4p1-5+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Beer-ware","Expat-with-advertising-restriction","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-client/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-15778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssh","version":"1:8.4p1-5+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2020-15778","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-15778","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-15778","cwe":"CWE-78","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-15778","date":"2026-10-08","epss":0.12996,"percentile":0.96239}],"risk":0.6498,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2020-15778","description":"scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of \"anomalous argument transfers\" because that could \"stand a great chance of breaking existing workflows.\""},"relatedVulnerabilities":[{"id":"CVE-2020-15778","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.9,"exploitabilityScore":1.6},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-15778","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-15778","cwe":"CWE-78","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-15778","date":"2026-10-08","epss":0.12996,"percentile":0.96239}],"urls":["https://access.redhat.com/errata/RHSA-2024:3166","https://github.com/cpandya2909/CVE-2020-15778/","https://news.ycombinator.com/item?id=25005567","https://security.gentoo.org/glsa/202212-06","https://security.netapp.com/advisory/ntap-20200731-0007/","https://www.openssh.com/security.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-15778","description":"scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of \"anomalous argument transfers\" because that could \"stand a great chance of breaking existing workflows.\""}]},{"artifact":{"id":"e974360838add45f","cpes":["cpe:2.3:a:golang:crypto:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4","type":"go-module","version":"v0.0.0-20220411220226-7b82a4e95df4","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.52.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-f5wc-c3c7-36mc","versionConstraint":"<0.52.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.0.0-20220411220226-7b82a4e95df4"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-f5wc-c3c7-36mc","fix":{"state":"fixed","versions":["0.52.0"],"available":[{"date":"2026-07-07","kind":"first-observed","version":"0.52.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39832","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-39832","cwe":"CWE-281","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39832","date":"2026-10-08","epss":0.00716,"percentile":0.52306}],"risk":0.64798,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-39832","https://go.dev/cl/778642","https://go.dev/issue/79435","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5006","https://access.redhat.com/security/cve/CVE-2026-39832","https://bugzilla.redhat.com/show_bug.cgi?id=2480685","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39832.json","https://access.redhat.com/errata/RHSA-2026:35833","https://access.redhat.com/errata/RHSA-2026:36199","https://access.redhat.com/errata/RHSA-2026:36319","https://access.redhat.com/errata/RHSA-2026:36625","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:37271","https://access.redhat.com/errata/RHSA-2026:37123","https://access.redhat.com/errata/RHSA-2026:37072","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:37410","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:41036","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:40972","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:42146","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:43052","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:49944","https://access.redhat.com/errata/RHSA-2026:52857","https://access.redhat.com/errata/RHSA-2026:52910"],"severity":"Critical","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-f5wc-c3c7-36mc","description":"golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys"},"relatedVulnerabilities":[{"id":"CVE-2026-39832","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","metrics":{"baseScore":8.7,"impactScore":5.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39832","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-39832","cwe":"CWE-281","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39832","date":"2026-10-08","epss":0.00716,"percentile":0.52306}],"urls":["https://go.dev/cl/778640","https://go.dev/cl/778641","https://go.dev/issue/79435","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5006","https://access.redhat.com/errata/RHSA-2026:35833","https://access.redhat.com/errata/RHSA-2026:36199","https://access.redhat.com/errata/RHSA-2026:36319","https://access.redhat.com/errata/RHSA-2026:36625","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:37072","https://access.redhat.com/errata/RHSA-2026:37123","https://access.redhat.com/errata/RHSA-2026:37271","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:37410","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:40972","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:41036","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:42146","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:43052","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:49944","https://access.redhat.com/errata/RHSA-2026:52857","https://access.redhat.com/errata/RHSA-2026:52910","https://access.redhat.com/errata/RHSA-2026:57194","https://access.redhat.com/errata/RHSA-2026:59579","https://access.redhat.com/errata/RHSA-2026:61314","https://access.redhat.com/errata/RHSA-2026:66521","https://access.redhat.com/errata/RHSA-2026:67450","https://access.redhat.com/security/cve/CVE-2026-39832","https://bugzilla.redhat.com/show_bug.cgi?id=2480685","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39832.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-39832","description":"When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-11856","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-11856","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-08","epss":0.00688,"percentile":0.51225}],"risk":0.6467200000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-11856","description":"Successfully using libcurl to do a transfer to a specific HTTP origin (`hostA`) with **Digest** authentication and then changing the origin to a different one (`hostB`) for a second transfer, reusing the same handle, makes libcurl wrongly pass on the  `Authorization:` header field meant for `hostA`, to `hostB`."},"relatedVulnerabilities":[{"id":"CVE-2026-11856","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-08","epss":0.00688,"percentile":0.51225}],"urls":["https://curl.se/docs/CVE-2026-11856.html","https://curl.se/docs/CVE-2026-11856.json","https://hackerone.com/reports/3793260"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11856","description":"Successfully using libcurl to do a transfer to a specific HTTP origin\n(`hostA`) with **Digest** authentication and then changing the origin to a\ndifferent one (`hostB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Authorization:` header field meant for `hostA`,\nto `hostB`."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11856","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-11856","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-08","epss":0.00688,"percentile":0.51225}],"risk":0.6467200000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-11856","description":"Successfully using libcurl to do a transfer to a specific HTTP origin (`hostA`) with **Digest** authentication and then changing the origin to a different one (`hostB`) for a second transfer, reusing the same handle, makes libcurl wrongly pass on the  `Authorization:` header field meant for `hostA`, to `hostB`."},"relatedVulnerabilities":[{"id":"CVE-2026-11856","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-08","epss":0.00688,"percentile":0.51225}],"urls":["https://curl.se/docs/CVE-2026-11856.html","https://curl.se/docs/CVE-2026-11856.json","https://hackerone.com/reports/3793260"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11856","description":"Successfully using libcurl to do a transfer to a specific HTTP origin\n(`hostA`) with **Digest** authentication and then changing the origin to a\ndifferent one (`hostB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Authorization:` header field meant for `hostA`,\nto `hostB`."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11856","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-11856","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-08","epss":0.00688,"percentile":0.51225}],"risk":0.6467200000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-11856","description":"Successfully using libcurl to do a transfer to a specific HTTP origin (`hostA`) with **Digest** authentication and then changing the origin to a different one (`hostB`) for a second transfer, reusing the same handle, makes libcurl wrongly pass on the  `Authorization:` header field meant for `hostA`, to `hostB`."},"relatedVulnerabilities":[{"id":"CVE-2026-11856","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-08","epss":0.00688,"percentile":0.51225}],"urls":["https://curl.se/docs/CVE-2026-11856.html","https://curl.se/docs/CVE-2026-11856.json","https://hackerone.com/reports/3793260"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11856","description":"Successfully using libcurl to do a transfer to a specific HTTP origin\n(`hostA`) with **Digest** authentication and then changing the origin to a\ndifferent one (`hostB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Authorization:` header field meant for `hostA`,\nto `hostB`."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.25.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-4601","versionConstraint":"<1.25.8||>=1.26.0-0,<1.26.1 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-4601","fix":{"state":"fixed","versions":["1.25.8","1.26.1"],"available":[{"date":"2026-03-06","kind":"release","version":"1.25.8"},{"date":"2026-03-06","kind":"release","version":"1.26.1"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-25679","cwe":"CWE-425","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-25679","cwe":"CWE-1286","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-25679","date":"2026-10-08","epss":0.00834,"percentile":0.56374}],"risk":0.6255000000000001,"urls":["https://go.dev/issue/77578","https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/752180","description":"url.Parse insufficiently validated the host/authority component and accepted some invalid URLs."},"relatedVulnerabilities":[{"id":"CVE-2026-25679","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-25679","cwe":"CWE-425","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-25679","cwe":"CWE-1286","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-25679","date":"2026-10-08","epss":0.00834,"percentile":0.56374}],"urls":["https://go.dev/cl/752180","https://go.dev/issue/77578","https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk","https://pkg.go.dev/vuln/GO-2026-4601","https://access.redhat.com/errata/RHSA-2026:10065","https://access.redhat.com/errata/RHSA-2026:10125","https://access.redhat.com/errata/RHSA-2026:10133","https://access.redhat.com/errata/RHSA-2026:10140","https://access.redhat.com/errata/RHSA-2026:10141","https://access.redhat.com/errata/RHSA-2026:10158","https://access.redhat.com/errata/RHSA-2026:10169","https://access.redhat.com/errata/RHSA-2026:10175","https://access.redhat.com/errata/RHSA-2026:10184","https://access.redhat.com/errata/RHSA-2026:10225","https://access.redhat.com/errata/RHSA-2026:10250","https://access.redhat.com/errata/RHSA-2026:10701","https://access.redhat.com/errata/RHSA-2026:10712","https://access.redhat.com/errata/RHSA-2026:10929","https://access.redhat.com/errata/RHSA-2026:11217","https://access.redhat.com/errata/RHSA-2026:11375","https://access.redhat.com/errata/RHSA-2026:11412","https://access.redhat.com/errata/RHSA-2026:11413","https://access.redhat.com/errata/RHSA-2026:11686","https://access.redhat.com/errata/RHSA-2026:11688","https://access.redhat.com/errata/RHSA-2026:11747","https://access.redhat.com/errata/RHSA-2026:11749","https://access.redhat.com/errata/RHSA-2026:11768","https://access.redhat.com/errata/RHSA-2026:11800","https://access.redhat.com/errata/RHSA-2026:11856","https://access.redhat.com/errata/RHSA-2026:11916","https://access.redhat.com/errata/RHSA-2026:11996","https://access.redhat.com/errata/RHSA-2026:12028","https://access.redhat.com/errata/RHSA-2026:12029","https://access.redhat.com/errata/RHSA-2026:12030","https://access.redhat.com/errata/RHSA-2026:12031","https://access.redhat.com/errata/RHSA-2026:12032","https://access.redhat.com/errata/RHSA-2026:12033","https://access.redhat.com/errata/RHSA-2026:12282","https://access.redhat.com/errata/RHSA-2026:13508","https://access.redhat.com/errata/RHSA-2026:13512","https://access.redhat.com/errata/RHSA-2026:13545","https://access.redhat.com/errata/RHSA-2026:13642","https://access.redhat.com/errata/RHSA-2026:13643","https://access.redhat.com/errata/RHSA-2026:13671","https://access.redhat.com/errata/RHSA-2026:13791","https://access.redhat.com/errata/RHSA-2026:13829","https://access.redhat.com/errata/RHSA-2026:14020","https://access.redhat.com/errata/RHSA-2026:14100","https://access.redhat.com/errata/RHSA-2026:14774","https://access.redhat.com/errata/RHSA-2026:14868","https://access.redhat.com/errata/RHSA-2026:14879","https://access.redhat.com/errata/RHSA-2026:15091","https://access.redhat.com/errata/RHSA-2026:16102","https://access.redhat.com/errata/RHSA-2026:16696","https://access.redhat.com/errata/RHSA-2026:16874","https://access.redhat.com/errata/RHSA-2026:16875","https://access.redhat.com/errata/RHSA-2026:17040","https://access.redhat.com/errata/RHSA-2026:17084","https://access.redhat.com/errata/RHSA-2026:17287","https://access.redhat.com/errata/RHSA-2026:17598","https://access.redhat.com/errata/RHSA-2026:19017","https://access.redhat.com/errata/RHSA-2026:19022","https://access.redhat.com/errata/RHSA-2026:19026","https://access.redhat.com/errata/RHSA-2026:19027","https://access.redhat.com/errata/RHSA-2026:19031","https://access.redhat.com/errata/RHSA-2026:19032","https://access.redhat.com/errata/RHSA-2026:19049","https://access.redhat.com/errata/RHSA-2026:19055","https://access.redhat.com/errata/RHSA-2026:19126","https://access.redhat.com/errata/RHSA-2026:19128","https://access.redhat.com/errata/RHSA-2026:19132","https://access.redhat.com/errata/RHSA-2026:19133","https://access.redhat.com/errata/RHSA-2026:19135","https://access.redhat.com/errata/RHSA-2026:19181","https://access.redhat.com/errata/RHSA-2026:19184","https://access.redhat.com/errata/RHSA-2026:19185","https://access.redhat.com/errata/RHSA-2026:19207","https://access.redhat.com/errata/RHSA-2026:19350","https://access.redhat.com/errata/RHSA-2026:19353","https://access.redhat.com/errata/RHSA-2026:19375","https://access.redhat.com/errata/RHSA-2026:19475","https://access.redhat.com/errata/RHSA-2026:19634","https://access.redhat.com/errata/RHSA-2026:19719","https://access.redhat.com/errata/RHSA-2026:19720","https://access.redhat.com/errata/RHSA-2026:19721","https://access.redhat.com/errata/RHSA-2026:19750","https://access.redhat.com/errata/RHSA-2026:20041","https://access.redhat.com/errata/RHSA-2026:20088","https://access.redhat.com/errata/RHSA-2026:20581","https://access.redhat.com/errata/RHSA-2026:20582","https://access.redhat.com/errata/RHSA-2026:20584","https://access.redhat.com/errata/RHSA-2026:20889","https://access.redhat.com/errata/RHSA-2026:21017","https://access.redhat.com/errata/RHSA-2026:21655","https://access.redhat.com/errata/RHSA-2026:21657","https://access.redhat.com/errata/RHSA-2026:21691","https://access.redhat.com/errata/RHSA-2026:21696","https://access.redhat.com/errata/RHSA-2026:21769","https://access.redhat.com/errata/RHSA-2026:22347","https://access.redhat.com/errata/RHSA-2026:22423","https://access.redhat.com/errata/RHSA-2026:22450","https://access.redhat.com/errata/RHSA-2026:22627","https://access.redhat.com/errata/RHSA-2026:22714","https://access.redhat.com/errata/RHSA-2026:22733","https://access.redhat.com/errata/RHSA-2026:22862","https://access.redhat.com/errata/RHSA-2026:22937","https://access.redhat.com/errata/RHSA-2026:23228","https://access.redhat.com/errata/RHSA-2026:23345","https://access.redhat.com/errata/RHSA-2026:24386","https://access.redhat.com/errata/RHSA-2026:24853","https://access.redhat.com/errata/RHSA-2026:25043","https://access.redhat.com/errata/RHSA-2026:25127","https://access.redhat.com/errata/RHSA-2026:25180","https://access.redhat.com/errata/RHSA-2026:25248","https://access.redhat.com/errata/RHSA-2026:25250","https://access.redhat.com/errata/RHSA-2026:25251","https://access.redhat.com/errata/RHSA-2026:25252","https://access.redhat.com/errata/RHSA-2026:25253","https://access.redhat.com/errata/RHSA-2026:26445","https://access.redhat.com/errata/RHSA-2026:26527","https://access.redhat.com/errata/RHSA-2026:26541","https://access.redhat.com/errata/RHSA-2026:26568","https://access.redhat.com/errata/RHSA-2026:26585","https://access.redhat.com/errata/RHSA-2026:26636","https://access.redhat.com/errata/RHSA-2026:27076","https://access.redhat.com/errata/RHSA-2026:28047","https://access.redhat.com/errata/RHSA-2026:28441","https://access.redhat.com/errata/RHSA-2026:28886","https://access.redhat.com/errata/RHSA-2026:28893","https://access.redhat.com/errata/RHSA-2026:28961","https://access.redhat.com/errata/RHSA-2026:29035","https://access.redhat.com/errata/RHSA-2026:29195","https://access.redhat.com/errata/RHSA-2026:29455","https://access.redhat.com/errata/RHSA-2026:29702","https://access.redhat.com/errata/RHSA-2026:29703","https://access.redhat.com/errata/RHSA-2026:29854","https://access.redhat.com/errata/RHSA-2026:33722","https://access.redhat.com/errata/RHSA-2026:34097","https://access.redhat.com/errata/RHSA-2026:34365","https://access.redhat.com/errata/RHSA-2026:36317","https://access.redhat.com/errata/RHSA-2026:36319","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:39810","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:42150","https://access.redhat.com/errata/RHSA-2026:42151","https://access.redhat.com/errata/RHSA-2026:48036","https://access.redhat.com/errata/RHSA-2026:49944","https://access.redhat.com/errata/RHSA-2026:5110","https://access.redhat.com/errata/RHSA-2026:51288","https://access.redhat.com/errata/RHSA-2026:52389","https://access.redhat.com/errata/RHSA-2026:52390","https://access.redhat.com/errata/RHSA-2026:52391","https://access.redhat.com/errata/RHSA-2026:54191","https://access.redhat.com/errata/RHSA-2026:54757","https://access.redhat.com/errata/RHSA-2026:5549","https://access.redhat.com/errata/RHSA-2026:56785","https://access.redhat.com/errata/RHSA-2026:56852","https://access.redhat.com/errata/RHSA-2026:56910","https://access.redhat.com/errata/RHSA-2026:57482","https://access.redhat.com/errata/RHSA-2026:5941","https://access.redhat.com/errata/RHSA-2026:5942","https://access.redhat.com/errata/RHSA-2026:5943","https://access.redhat.com/errata/RHSA-2026:5944","https://access.redhat.com/errata/RHSA-2026:59830","https://access.redhat.com/errata/RHSA-2026:60018","https://access.redhat.com/errata/RHSA-2026:6341","https://access.redhat.com/errata/RHSA-2026:6344","https://access.redhat.com/errata/RHSA-2026:6382","https://access.redhat.com/errata/RHSA-2026:6383","https://access.redhat.com/errata/RHSA-2026:6388","https://access.redhat.com/errata/RHSA-2026:6564","https://access.redhat.com/errata/RHSA-2026:65838","https://access.redhat.com/errata/RHSA-2026:66401","https://access.redhat.com/errata/RHSA-2026:6720","https://access.redhat.com/errata/RHSA-2026:6802","https://access.redhat.com/errata/RHSA-2026:6949","https://access.redhat.com/errata/RHSA-2026:7005","https://access.redhat.com/errata/RHSA-2026:7009","https://access.redhat.com/errata/RHSA-2026:7011","https://access.redhat.com/errata/RHSA-2026:7259","https://access.redhat.com/errata/RHSA-2026:7291","https://access.redhat.com/errata/RHSA-2026:7315","https://access.redhat.com/errata/RHSA-2026:7328","https://access.redhat.com/errata/RHSA-2026:7385","https://access.redhat.com/errata/RHSA-2026:7665","https://access.redhat.com/errata/RHSA-2026:7669","https://access.redhat.com/errata/RHSA-2026:7674","https://access.redhat.com/errata/RHSA-2026:7833","https://access.redhat.com/errata/RHSA-2026:7834","https://access.redhat.com/errata/RHSA-2026:7876","https://access.redhat.com/errata/RHSA-2026:7877","https://access.redhat.com/errata/RHSA-2026:7878","https://access.redhat.com/errata/RHSA-2026:7879","https://access.redhat.com/errata/RHSA-2026:7883","https://access.redhat.com/errata/RHSA-2026:7992","https://access.redhat.com/errata/RHSA-2026:8151","https://access.redhat.com/errata/RHSA-2026:8167","https://access.redhat.com/errata/RHSA-2026:8314","https://access.redhat.com/errata/RHSA-2026:8322","https://access.redhat.com/errata/RHSA-2026:8324","https://access.redhat.com/errata/RHSA-2026:8337","https://access.redhat.com/errata/RHSA-2026:8338","https://access.redhat.com/errata/RHSA-2026:8433","https://access.redhat.com/errata/RHSA-2026:8434","https://access.redhat.com/errata/RHSA-2026:8456","https://access.redhat.com/errata/RHSA-2026:8483","https://access.redhat.com/errata/RHSA-2026:8484","https://access.redhat.com/errata/RHSA-2026:8490","https://access.redhat.com/errata/RHSA-2026:8491","https://access.redhat.com/errata/RHSA-2026:8493","https://access.redhat.com/errata/RHSA-2026:8840","https://access.redhat.com/errata/RHSA-2026:8841","https://access.redhat.com/errata/RHSA-2026:8842","https://access.redhat.com/errata/RHSA-2026:8845","https://access.redhat.com/errata/RHSA-2026:8847","https://access.redhat.com/errata/RHSA-2026:8848","https://access.redhat.com/errata/RHSA-2026:8849","https://access.redhat.com/errata/RHSA-2026:8851","https://access.redhat.com/errata/RHSA-2026:8852","https://access.redhat.com/errata/RHSA-2026:8853","https://access.redhat.com/errata/RHSA-2026:8855","https://access.redhat.com/errata/RHSA-2026:8856","https://access.redhat.com/errata/RHSA-2026:8860","https://access.redhat.com/errata/RHSA-2026:8877","https://access.redhat.com/errata/RHSA-2026:8878","https://access.redhat.com/errata/RHSA-2026:8879","https://access.redhat.com/errata/RHSA-2026:8881","https://access.redhat.com/errata/RHSA-2026:8882","https://access.redhat.com/errata/RHSA-2026:8930","https://access.redhat.com/errata/RHSA-2026:8931","https://access.redhat.com/errata/RHSA-2026:8949","https://access.redhat.com/errata/RHSA-2026:9043","https://access.redhat.com/errata/RHSA-2026:9044","https://access.redhat.com/errata/RHSA-2026:9052","https://access.redhat.com/errata/RHSA-2026:9090","https://access.redhat.com/errata/RHSA-2026:9093","https://access.redhat.com/errata/RHSA-2026:9094","https://access.redhat.com/errata/RHSA-2026:9097","https://access.redhat.com/errata/RHSA-2026:9098","https://access.redhat.com/errata/RHSA-2026:9108","https://access.redhat.com/errata/RHSA-2026:9109","https://access.redhat.com/errata/RHSA-2026:9385","https://access.redhat.com/errata/RHSA-2026:9434","https://access.redhat.com/errata/RHSA-2026:9435","https://access.redhat.com/errata/RHSA-2026:9436","https://access.redhat.com/errata/RHSA-2026:9439","https://access.redhat.com/errata/RHSA-2026:9440","https://access.redhat.com/errata/RHSA-2026:9448","https://access.redhat.com/errata/RHSA-2026:9453","https://access.redhat.com/errata/RHSA-2026:9461","https://access.redhat.com/errata/RHSA-2026:9695","https://access.redhat.com/errata/RHSA-2026:9742","https://access.redhat.com/errata/RHSA-2026:9872","https://access.redhat.com/security/cve/CVE-2026-25679","https://bugzilla.redhat.com/show_bug.cgi?id=2445356","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-25679","description":"url.Parse insufficiently validated the host/authority component and accepted some invalid URLs."}]},{"artifact":{"id":"17ddd96f89992648","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson-core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson_core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml:jackson-core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml:jackson_core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson-core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml:jackson:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml:core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:core:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:core:core:2.1.3:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.1.3","type":"java-archive","version":"2.1.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/jackson-core-2.1.3.jar","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":[{"value":"f6c3aed1cdfa21b5c1737c915186ea93a95a58bd","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/google-login.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/jackson-core-2.1.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.15.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h46c-h94j-95f3","versionConstraint":"<2.15.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-core","version":"2.1.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-h46c-h94j-95f3","fix":{"state":"fixed","versions":["2.15.0"],"available":[{"date":"2025-06-28","kind":"first-observed","version":"2.15.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52999","cwe":"CWE-121","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-52999","date":"2026-10-08","epss":0.00772,"percentile":0.54292}],"risk":0.62532,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3","https://nvd.nist.gov/vuln/detail/CVE-2025-52999","https://github.com/FasterXML/jackson-core/pull/943"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h46c-h94j-95f3","description":"jackson-core can throw a StackoverflowError when processing deeply nested data"},"relatedVulnerabilities":[{"id":"CVE-2025-52999","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52999","cwe":"CWE-121","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-52999","date":"2026-10-08","epss":0.00772,"percentile":0.54292}],"urls":["https://github.com/FasterXML/jackson-core/pull/943","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-52999","description":"jackson-core contains core low-level incremental (\"streaming\") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources."}]},{"artifact":{"id":"b0235cbbf31e6c4b","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson-core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson_core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson-core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:jackson:core:2.13.4:*:*:*:*:*:*:*","cpe:2.3:a:core:core:2.13.4:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4","type":"java-archive","version":"2.13.4","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jackson2-api.hpi:WEB-INF/lib/jackson-core-2.13.4.jar","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":[{"value":"0cf934c681294b97ef6d80082faeefbe1edadf56","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jackson2-api.hpi:WEB-INF/lib/jackson-core-2.13.4.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.15.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h46c-h94j-95f3","versionConstraint":"<2.15.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-core","version":"2.13.4"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-h46c-h94j-95f3","fix":{"state":"fixed","versions":["2.15.0"],"available":[{"date":"2025-06-28","kind":"first-observed","version":"2.15.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52999","cwe":"CWE-121","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-52999","date":"2026-10-08","epss":0.00772,"percentile":0.54292}],"risk":0.62532,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3","https://nvd.nist.gov/vuln/detail/CVE-2025-52999","https://github.com/FasterXML/jackson-core/pull/943"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h46c-h94j-95f3","description":"jackson-core can throw a StackoverflowError when processing deeply nested data"},"relatedVulnerabilities":[{"id":"CVE-2025-52999","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52999","cwe":"CWE-121","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-52999","date":"2026-10-08","epss":0.00772,"percentile":0.54292}],"urls":["https://github.com/FasterXML/jackson-core/pull/943","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-52999","description":"jackson-core contains core low-level incremental (\"streaming\") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources."}]},{"artifact":{"id":"3c89526de587381a","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson-core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:jackson:core:2.14.2:*:*:*:*:*:*:*","cpe:2.3:a:core:core:2.14.2:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2","type":"java-archive","version":"2.14.2","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-core","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:28ce38a426e8c5f4d5c1503345486bf2d71355572ce12a34d66ff30128719565","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.15.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h46c-h94j-95f3","versionConstraint":"<2.15.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-core","version":"2.14.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-h46c-h94j-95f3","fix":{"state":"fixed","versions":["2.15.0"],"available":[{"date":"2025-06-28","kind":"first-observed","version":"2.15.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52999","cwe":"CWE-121","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-52999","date":"2026-10-08","epss":0.00772,"percentile":0.54292}],"risk":0.62532,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3","https://nvd.nist.gov/vuln/detail/CVE-2025-52999","https://github.com/FasterXML/jackson-core/pull/943"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h46c-h94j-95f3","description":"jackson-core can throw a StackoverflowError when processing deeply nested data"},"relatedVulnerabilities":[{"id":"CVE-2025-52999","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52999","cwe":"CWE-121","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-52999","date":"2026-10-08","epss":0.00772,"percentile":0.54292}],"urls":["https://github.com/FasterXML/jackson-core/pull/943","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-52999","description":"jackson-core contains core low-level incremental (\"streaming\") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources."}]},{"artifact":{"id":"2a88897c46c4751f","cpes":["cpe:2.3:a:libperl5.32:libperl5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"libperl5.32","purl":"pkg:deb/debian/libperl5.32@5.32.1-4%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=perl","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libperl5.32/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libperl5.32/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libperl5.32:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libperl5.32:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.32.1-4+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-47038","versionConstraint":"< 5.32.1-4+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-47038","fix":{"state":"fixed","versions":["5.32.1-4+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"5.32.1-4+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-47038","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-47038","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-47038","date":"2026-10-08","epss":0.00814,"percentile":0.55724}],"risk":0.62271,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-47038","description":"A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer."},"relatedVulnerabilities":[{"id":"CVE-2023-47038","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-47038","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-47038","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-47038","date":"2026-10-08","epss":0.00814,"percentile":0.55724}],"urls":["https://access.redhat.com/errata/RHSA-2024:2228","https://access.redhat.com/errata/RHSA-2024:3128","https://access.redhat.com/security/cve/CVE-2023-47038","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056746","https://bugzilla.redhat.com/show_bug.cgi?id=2249523","https://github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010","https://github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6","https://github.com/Perl/perl5/commit/ff1f9f59360afeebd6f75ca1502f5c3ebf077da3","https://github.com/aquasecurity/trivy/discussions/8400","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNEEWAACXQCEEAKSG7XX2D5YDRWLCIZJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UMDZZ4SCEW6FRWZDMXGAKZ35THTAWFG6/","https://perldoc.perl.org/perl5382delta#CVE-2023-47038-Write-past-buffer-end-via-illegal-user-defined-Unicode-property","https://ubuntu.com/security/CVE-2023-47100","https://www.suse.com/security/cve/CVE-2023-47100.html","https://github.com/Perl/perl5/commit/92a9eb3d0d52ec7655c1beb29999a5a5219be664"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-47038","description":"A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer."}]},{"artifact":{"id":"ca766af4b1156087","cpes":["cpe:2.3:a:perl:perl:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"perl","purl":"pkg:deb/debian/perl@5.32.1-4%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/perl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.list"},{"path":"/var/lib/dpkg/info/perl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.postinst"},{"path":"/var/lib/dpkg/info/perl.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.postrm"},{"path":"/var/lib/dpkg/info/perl.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.preinst"},{"path":"/var/lib/dpkg/info/perl.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"5.32.1-4+deb11u3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-47038","versionConstraint":"< 5.32.1-4+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-47038","fix":{"state":"fixed","versions":["5.32.1-4+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"5.32.1-4+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-47038","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-47038","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-47038","date":"2026-10-08","epss":0.00814,"percentile":0.55724}],"risk":0.62271,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-47038","description":"A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer."},"relatedVulnerabilities":[{"id":"CVE-2023-47038","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-47038","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-47038","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-47038","date":"2026-10-08","epss":0.00814,"percentile":0.55724}],"urls":["https://access.redhat.com/errata/RHSA-2024:2228","https://access.redhat.com/errata/RHSA-2024:3128","https://access.redhat.com/security/cve/CVE-2023-47038","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056746","https://bugzilla.redhat.com/show_bug.cgi?id=2249523","https://github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010","https://github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6","https://github.com/Perl/perl5/commit/ff1f9f59360afeebd6f75ca1502f5c3ebf077da3","https://github.com/aquasecurity/trivy/discussions/8400","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNEEWAACXQCEEAKSG7XX2D5YDRWLCIZJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UMDZZ4SCEW6FRWZDMXGAKZ35THTAWFG6/","https://perldoc.perl.org/perl5382delta#CVE-2023-47038-Write-past-buffer-end-via-illegal-user-defined-Unicode-property","https://ubuntu.com/security/CVE-2023-47100","https://www.suse.com/security/cve/CVE-2023-47100.html","https://github.com/Perl/perl5/commit/92a9eb3d0d52ec7655c1beb29999a5a5219be664"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-47038","description":"A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer."}]},{"artifact":{"id":"0132d68bd1bdb220","cpes":["cpe:2.3:a:perl-base:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=perl","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.32.1-4+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-47038","versionConstraint":"< 5.32.1-4+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-47038","fix":{"state":"fixed","versions":["5.32.1-4+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"5.32.1-4+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-47038","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-47038","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-47038","date":"2026-10-08","epss":0.00814,"percentile":0.55724}],"risk":0.62271,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-47038","description":"A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer."},"relatedVulnerabilities":[{"id":"CVE-2023-47038","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-47038","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-47038","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-47038","date":"2026-10-08","epss":0.00814,"percentile":0.55724}],"urls":["https://access.redhat.com/errata/RHSA-2024:2228","https://access.redhat.com/errata/RHSA-2024:3128","https://access.redhat.com/security/cve/CVE-2023-47038","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056746","https://bugzilla.redhat.com/show_bug.cgi?id=2249523","https://github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010","https://github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6","https://github.com/Perl/perl5/commit/ff1f9f59360afeebd6f75ca1502f5c3ebf077da3","https://github.com/aquasecurity/trivy/discussions/8400","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNEEWAACXQCEEAKSG7XX2D5YDRWLCIZJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UMDZZ4SCEW6FRWZDMXGAKZ35THTAWFG6/","https://perldoc.perl.org/perl5382delta#CVE-2023-47038-Write-past-buffer-end-via-illegal-user-defined-Unicode-property","https://ubuntu.com/security/CVE-2023-47100","https://www.suse.com/security/cve/CVE-2023-47100.html","https://github.com/Perl/perl5/commit/92a9eb3d0d52ec7655c1beb29999a5a5219be664"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-47038","description":"A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer."}]},{"artifact":{"id":"0e78a1cc7a598ddd","cpes":["cpe:2.3:a:perl-modules-5.32:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-modules-5.32:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules_5.32:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules_5.32:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-modules:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-modules:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-modules-5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_modules_5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"perl-modules-5.32","purl":"pkg:deb/debian/perl-modules-5.32@5.32.1-4%2Bdeb11u2?arch=all&distro=debian-11.7&upstream=perl","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-modules-5.32/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/perl-modules-5.32/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-modules-5.32.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl-modules-5.32.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-modules-5.32.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl-modules-5.32.list"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.32.1-4+deb11u3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-47038","versionConstraint":"< 5.32.1-4+deb11u3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-47038","fix":{"state":"fixed","versions":["5.32.1-4+deb11u3"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"5.32.1-4+deb11u3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-47038","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-47038","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-47038","date":"2026-10-08","epss":0.00814,"percentile":0.55724}],"risk":0.62271,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-47038","description":"A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer."},"relatedVulnerabilities":[{"id":"CVE-2023-47038","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-47038","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-47038","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-47038","date":"2026-10-08","epss":0.00814,"percentile":0.55724}],"urls":["https://access.redhat.com/errata/RHSA-2024:2228","https://access.redhat.com/errata/RHSA-2024:3128","https://access.redhat.com/security/cve/CVE-2023-47038","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056746","https://bugzilla.redhat.com/show_bug.cgi?id=2249523","https://github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010","https://github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6","https://github.com/Perl/perl5/commit/ff1f9f59360afeebd6f75ca1502f5c3ebf077da3","https://github.com/aquasecurity/trivy/discussions/8400","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNEEWAACXQCEEAKSG7XX2D5YDRWLCIZJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UMDZZ4SCEW6FRWZDMXGAKZ35THTAWFG6/","https://perldoc.perl.org/perl5382delta#CVE-2023-47038-Write-past-buffer-end-via-illegal-user-defined-Unicode-property","https://ubuntu.com/security/CVE-2023-47100","https://www.suse.com/security/cve/CVE-2023-47100.html","https://github.com/Perl/perl5/commit/92a9eb3d0d52ec7655c1beb29999a5a5219be664"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-47038","description":"A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.20.12"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-2382","versionConstraint":"<1.20.12||>=1.21.0-0,<1.21.5 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-2382","fix":{"state":"fixed","versions":["1.20.12","1.21.5"],"available":[{"date":"2023-12-05","kind":"release","version":"1.20.12"},{"date":"2023-12-05","kind":"release","version":"1.21.5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-39326","date":"2026-10-08","epss":0.01208,"percentile":0.67458}],"risk":0.62212,"urls":["https://go.dev/cl/547335","https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/64433","description":"A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body.\n\nA malicious HTTP client can further exploit this to cause a server to automatically read a large amount of data (up to about 1GiB) when a handler fails to read the entire body of a request.\n\nChunk extensions are a little-used HTTP feature which permit including additional metadata in a request or response body sent using the chunked encoding. The net/http chunked encoding reader discards this metadata. A sender can exploit this by inserting a large metadata segment with each byte transferred. The chunk reader now produces an error if the ratio of real body to encoded bytes grows too small."},"relatedVulnerabilities":[{"id":"CVE-2023-39326","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-39326","date":"2026-10-08","epss":0.01208,"percentile":0.67458}],"urls":["https://go.dev/cl/547335","https://go.dev/issue/64433","https://groups.google.com/g/golang-dev/c/6ypN5EjibjM/m/KmLVYH_uAgAJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIU6HOGV6RRIKWM57LOXQA75BGZSIH6G/","https://pkg.go.dev/vuln/GO-2023-2382"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39326","description":"A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of data (up to about 1GiB) when a handler fails to read the entire body of a request. Chunk extensions are a little-used HTTP feature which permit including additional metadata in a request or response body sent using the chunked encoding. The net/http chunked encoding reader discards this metadata. A sender can exploit this by inserting a large metadata segment with each byte transferred. The chunk reader now produces an error if the ratio of real body to encoded bytes grows too small."}]},{"artifact":{"id":"6cdfd6c89d1c044e","cpes":["cpe:2.3:a:ion-java:ion-java:1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ion-java:ion_java:1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ion_java:ion-java:1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ion_java:ion_java:1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ion:ion-java:1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ion:ion_java:1.0.2:*:*:*:*:*:*:*"],"name":"ion-java","purl":"pkg:maven/software.amazon.ion/ion-java@1.0.2","type":"java-archive","version":"1.0.2","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"software.amazon.ion","virtualPath":"/usr/share/jenkins/ref/plugins/aws-java-sdk-minimal.jpi:WEB-INF/lib/ion-java-1.0.2.jar","manifestName":"","pomArtifactID":"ion-java","archiveDigests":[{"value":"ee9dacea7726e495f8352b81c12c23834ffbc564","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/aws-java-sdk-minimal.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/aws-java-sdk-minimal.jpi:WEB-INF/lib/ion-java-1.0.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-264p-99wq-f4j6","versionConstraint":"<1.10.5 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"software.amazon.ion:ion-java","version":"1.0.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-264p-99wq-f4j6","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21634","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-21634","date":"2026-10-08","epss":0.00827,"percentile":0.56155}],"risk":0.62025,"urls":["https://github.com/amazon-ion/ion-java/security/advisories/GHSA-264p-99wq-f4j6","https://nvd.nist.gov/vuln/detail/CVE-2024-21634","https://security.netapp.com/advisory/ntap-20241108-0002"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-264p-99wq-f4j6","description":"Ion Java StackOverflow vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-21634","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21634","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-21634","date":"2026-10-08","epss":0.00827,"percentile":0.56155}],"urls":["https://github.com/amazon-ion/ion-java/security/advisories/GHSA-264p-99wq-f4j6","https://security.netapp.com/advisory/ntap-20241108-0002/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21634","description":"Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service issue exists in `ion-java` for applications that use `ion-java` to deserialize Ion text encoded data, or deserialize Ion text or binary encoded data into the `IonValue` model and then invoke certain `IonValue` methods on that in-memory representation. An actor could craft Ion data that, when loaded by the affected application and/or processed using the `IonValue` model, results in a `StackOverflowError` originating from the `ion-java` library. The patch is included in `ion-java` 1.10.5. As a workaround, do not load data which originated from an untrusted source or that could have been tampered with."}]},{"artifact":{"id":"382f3fc6442a9e5d","cpes":["cpe:2.3:a:wget:wget:1.21-1\\+deb11u1:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/debian/wget@1.21-1%2Bdeb11u1?arch=amd64&distro=debian-11.7","type":"deb","version":"1.21-1+deb11u1","language":"","licenses":["sha256:c58cb5a2d94f35f0e9b0f1a038d48b73477aa12782ff17328c21d8a86f5f99d5"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-10524","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"wget","version":"1.21-1+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-10524","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"reefs@jfrog.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":3.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-10524","cwe":"CWE-918","type":"Secondary","source":"reefs@jfrog.com"}],"epss":[{"cve":"CVE-2024-10524","date":"2026-10-08","epss":0.01071,"percentile":0.63827}],"risk":0.615825,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-10524","description":"Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host."},"relatedVulnerabilities":[{"id":"CVE-2024-10524","cvss":[{"type":"Secondary","source":"reefs@jfrog.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":3.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-10524","cwe":"CWE-918","type":"Secondary","source":"reefs@jfrog.com"}],"epss":[{"cve":"CVE-2024-10524","date":"2026-10-08","epss":0.01071,"percentile":0.63827}],"urls":["https://git.savannah.gnu.org/cgit/wget.git/commit/?id=c419542d956a2607bbce5df64b9d378a8588d778","https://jfrog.com/blog/cve-2024-10524-wget-zero-day-vulnerability/","https://seclists.org/oss-sec/2024/q4/107","http://www.openwall.com/lists/oss-security/2024/11/18/6","https://security.netapp.com/advisory/ntap-20250321-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-10524","description":"Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host."}]},{"artifact":{"id":"382f3fc6442a9e5d","cpes":["cpe:2.3:a:wget:wget:1.21-1\\+deb11u1:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/debian/wget@1.21-1%2Bdeb11u1?arch=amd64&distro=debian-11.7","type":"deb","version":"1.21-1+deb11u1","language":"","licenses":["sha256:c58cb5a2d94f35f0e9b0f1a038d48b73477aa12782ff17328c21d8a86f5f99d5"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-31879","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"wget","version":"1.21-1+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2021-31879","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-31879","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-31879","date":"2026-10-08","epss":0.01104,"percentile":0.64746}],"risk":0.6127199999999999,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2021-31879","description":"GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007."},"relatedVulnerabilities":[{"id":"CVE-2021-31879","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-31879","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-31879","date":"2026-10-08","epss":0.01104,"percentile":0.64746}],"urls":["https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html","https://security.netapp.com/advisory/ntap-20210618-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-31879","description":"GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6100","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6100","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0a1, < 3.14.5rc1||>= 3.15.0a1, < 3.15.0b1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6100","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.5rc1","3.15.0b1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b1"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.13.14"},{"date":"2026-07-02","kind":"first-observed","version":"3.14.5rc1"},{"date":"2026-07-02","kind":"first-observed","version":"3.15.0b1"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6100","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-6100","cwe":"CWE-787","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-6100","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-6100","date":"2026-10-08","epss":0.00761,"percentile":0.53914}],"risk":0.612605,"urls":["https://github.com/python/cpython/commit/47128e64f98c3a20271138a98c2922bea2a3ee0e","https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d","https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2","https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20","https://github.com/python/cpython/commit/e20c6c9667c99ecaab96e1a2b3767082841ffc8b","https://github.com/python/cpython/commit/ea8d735eb084cf8cc021df1a30e90d10a8f052e3","https://github.com/python/cpython/issues/148395","https://github.com/python/cpython/pull/148396","https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/","http://www.openwall.com/lists/oss-security/2026/04/13/10","https://access.redhat.com/errata/RHSA-2026:10117","https://access.redhat.com/errata/RHSA-2026:10140","https://access.redhat.com/errata/RHSA-2026:10141","https://access.redhat.com/errata/RHSA-2026:10711","https://access.redhat.com/errata/RHSA-2026:10745","https://access.redhat.com/errata/RHSA-2026:10774","https://access.redhat.com/errata/RHSA-2026:10949","https://access.redhat.com/errata/RHSA-2026:10950","https://access.redhat.com/errata/RHSA-2026:11062","https://access.redhat.com/errata/RHSA-2026:11077","https://access.redhat.com/errata/RHSA-2026:11768","https://access.redhat.com/errata/RHSA-2026:13692","https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:14652","https://access.redhat.com/errata/RHSA-2026:14653","https://access.redhat.com/errata/RHSA-2026:14656","https://access.redhat.com/errata/RHSA-2026:16699","https://access.redhat.com/errata/RHSA-2026:17525","https://access.redhat.com/errata/RHSA-2026:17619","https://access.redhat.com/errata/RHSA-2026:19019","https://access.redhat.com/errata/RHSA-2026:19064","https://access.redhat.com/errata/RHSA-2026:19175","https://access.redhat.com/errata/RHSA-2026:19176","https://access.redhat.com/errata/RHSA-2026:19177","https://access.redhat.com/errata/RHSA-2026:19216","https://access.redhat.com/errata/RHSA-2026:19549","https://access.redhat.com/errata/RHSA-2026:19570","https://access.redhat.com/errata/RHSA-2026:19571","https://access.redhat.com/errata/RHSA-2026:19576","https://access.redhat.com/errata/RHSA-2026:19590","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:21682","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:26187","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:52400","https://access.redhat.com/errata/RHSA-2026:8822","https://access.redhat.com/errata/RHSA-2026:8824","https://access.redhat.com/errata/RHSA-2026:9228","https://access.redhat.com/security/cve/CVE-2026-6100","https://bugzilla.redhat.com/show_bug.cgi?id=2457932","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6100.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6100","description":"Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.\n\nThe vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable."},"relatedVulnerabilities":[]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.25.10"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-4981","versionConstraint":"<1.25.10||>=1.26.0-0,<1.26.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-4981","fix":{"state":"fixed","versions":["1.25.10","1.26.3"],"available":[{"date":"2026-05-07","kind":"release","version":"1.25.10"},{"date":"2026-05-07","kind":"release","version":"1.26.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33811","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-33811","cwe":"CWE-1341","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33811","date":"2026-10-08","epss":0.00813,"percentile":0.55713}],"risk":0.60975,"urls":["https://go.dev/cl/767860","https://groups.google.com/g/golang-announce/c/qcCIEXso47M"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/78803","description":"When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash."},"relatedVulnerabilities":[{"id":"CVE-2026-33811","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33811","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-33811","cwe":"CWE-1341","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33811","date":"2026-10-08","epss":0.00813,"percentile":0.55713}],"urls":["https://go.dev/cl/767860","https://go.dev/issue/78803","https://groups.google.com/g/golang-announce/c/qcCIEXso47M","https://pkg.go.dev/vuln/GO-2026-4981","https://access.redhat.com/errata/RHSA-2026:22112","https://access.redhat.com/errata/RHSA-2026:22120","https://access.redhat.com/errata/RHSA-2026:22121","https://access.redhat.com/errata/RHSA-2026:23262","https://access.redhat.com/errata/RHSA-2026:23264","https://access.redhat.com/errata/RHSA-2026:33120","https://access.redhat.com/errata/RHSA-2026:33123","https://access.redhat.com/errata/RHSA-2026:33142","https://access.redhat.com/errata/RHSA-2026:33150","https://access.redhat.com/errata/RHSA-2026:33574","https://access.redhat.com/errata/RHSA-2026:34357","https://access.redhat.com/errata/RHSA-2026:34359","https://access.redhat.com/errata/RHSA-2026:34364","https://access.redhat.com/errata/RHSA-2026:35832","https://access.redhat.com/errata/RHSA-2026:35993","https://access.redhat.com/errata/RHSA-2026:35994","https://access.redhat.com/errata/RHSA-2026:35995","https://access.redhat.com/errata/RHSA-2026:36207","https://access.redhat.com/errata/RHSA-2026:36319","https://access.redhat.com/errata/RHSA-2026:36617","https://access.redhat.com/errata/RHSA-2026:36625","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36776","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:38504","https://access.redhat.com/errata/RHSA-2026:39266","https://access.redhat.com/errata/RHSA-2026:39272","https://access.redhat.com/errata/RHSA-2026:39319","https://access.redhat.com/errata/RHSA-2026:39573","https://access.redhat.com/errata/RHSA-2026:39810","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41030","https://access.redhat.com/errata/RHSA-2026:41055","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:42043","https://access.redhat.com/errata/RHSA-2026:42047","https://access.redhat.com/errata/RHSA-2026:42048","https://access.redhat.com/errata/RHSA-2026:42049","https://access.redhat.com/errata/RHSA-2026:42050","https://access.redhat.com/errata/RHSA-2026:42051","https://access.redhat.com/errata/RHSA-2026:42078","https://access.redhat.com/errata/RHSA-2026:42079","https://access.redhat.com/errata/RHSA-2026:42082","https://access.redhat.com/errata/RHSA-2026:42132","https://access.redhat.com/errata/RHSA-2026:42150","https://access.redhat.com/errata/RHSA-2026:42151","https://access.redhat.com/errata/RHSA-2026:42240","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:42852","https://access.redhat.com/errata/RHSA-2026:42946","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:44622","https://access.redhat.com/errata/RHSA-2026:46885","https://access.redhat.com/errata/RHSA-2026:47149","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:47952","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:49702","https://access.redhat.com/errata/RHSA-2026:49703","https://access.redhat.com/errata/RHSA-2026:49712","https://access.redhat.com/errata/RHSA-2026:50205","https://access.redhat.com/errata/RHSA-2026:50300","https://access.redhat.com/errata/RHSA-2026:50319","https://access.redhat.com/errata/RHSA-2026:50336","https://access.redhat.com/errata/RHSA-2026:50843","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:51057","https://access.redhat.com/errata/RHSA-2026:51187","https://access.redhat.com/errata/RHSA-2026:51194","https://access.redhat.com/errata/RHSA-2026:51341","https://access.redhat.com/errata/RHSA-2026:53412","https://access.redhat.com/errata/RHSA-2026:53413","https://access.redhat.com/errata/RHSA-2026:53415","https://access.redhat.com/errata/RHSA-2026:53530","https://access.redhat.com/errata/RHSA-2026:54168","https://access.redhat.com/errata/RHSA-2026:54191","https://access.redhat.com/errata/RHSA-2026:54274","https://access.redhat.com/errata/RHSA-2026:54283","https://access.redhat.com/errata/RHSA-2026:54284","https://access.redhat.com/errata/RHSA-2026:54285","https://access.redhat.com/errata/RHSA-2026:54286","https://access.redhat.com/errata/RHSA-2026:54287","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54441","https://access.redhat.com/errata/RHSA-2026:54500","https://access.redhat.com/errata/RHSA-2026:54552","https://access.redhat.com/errata/RHSA-2026:54556","https://access.redhat.com/errata/RHSA-2026:54584","https://access.redhat.com/errata/RHSA-2026:54602","https://access.redhat.com/errata/RHSA-2026:54603","https://access.redhat.com/errata/RHSA-2026:54757","https://access.redhat.com/errata/RHSA-2026:56340","https://access.redhat.com/errata/RHSA-2026:56785","https://access.redhat.com/errata/RHSA-2026:56789","https://access.redhat.com/errata/RHSA-2026:56790","https://access.redhat.com/errata/RHSA-2026:56852","https://access.redhat.com/errata/RHSA-2026:56855","https://access.redhat.com/errata/RHSA-2026:56910","https://access.redhat.com/errata/RHSA-2026:56912","https://access.redhat.com/errata/RHSA-2026:56913","https://access.redhat.com/errata/RHSA-2026:57191","https://access.redhat.com/errata/RHSA-2026:57194","https://access.redhat.com/errata/RHSA-2026:57482","https://access.redhat.com/errata/RHSA-2026:57488","https://access.redhat.com/errata/RHSA-2026:57649","https://access.redhat.com/errata/RHSA-2026:59467","https://access.redhat.com/errata/RHSA-2026:59559","https://access.redhat.com/errata/RHSA-2026:60018","https://access.redhat.com/errata/RHSA-2026:60025","https://access.redhat.com/errata/RHSA-2026:60302","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61253","https://access.redhat.com/errata/RHSA-2026:61313","https://access.redhat.com/errata/RHSA-2026:65126","https://access.redhat.com/errata/RHSA-2026:65534","https://access.redhat.com/errata/RHSA-2026:65886","https://access.redhat.com/errata/RHSA-2026:66022","https://access.redhat.com/errata/RHSA-2026:67149","https://access.redhat.com/errata/RHSA-2026:67287","https://access.redhat.com/errata/RHSA-2026:67319","https://access.redhat.com/security/cve/CVE-2026-33811","https://bugzilla.redhat.com/show_bug.cgi?id=2467822","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33811","description":"When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.27"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-21587","versionConstraint":"< 1.8.0_452||>= 1.9, < 8.0.452||>= 12, < 17.0.15||>= 18, < 21.0.7||>= 22, < 24.0.1||>= 9, < 11.0.27 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-21587","fix":{"state":"fixed","versions":["1.8.0_452","8.0.452","11.0.27","17.0.15","21.0.7","24.0.1"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_452"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.452"},{"date":"2025-09-04","kind":"first-observed","version":"17.0.15"},{"date":"2025-09-04","kind":"first-observed","version":"21.0.7"},{"date":"2025-09-04","kind":"first-observed","version":"24.0.1"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.27"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-21587","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-21587","date":"2026-10-08","epss":0.00818,"percentile":0.55865}],"risk":0.60941,"urls":["https://www.oracle.com/security-alerts/cpuapr2025.html","https://lists.debian.org/debian-lts-announce/2025/05/msg00026.html","https://security.netapp.com/advisory/ntap-20250502-0005/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-21587","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition:20.3.17 and  21.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"382f3fc6442a9e5d","cpes":["cpe:2.3:a:wget:wget:1.21-1\\+deb11u1:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/debian/wget@1.21-1%2Bdeb11u1?arch=amd64&distro=debian-11.7","type":"deb","version":"1.21-1+deb11u1","language":"","licenses":["sha256:c58cb5a2d94f35f0e9b0f1a038d48b73477aa12782ff17328c21d8a86f5f99d5"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.21-1+deb11u2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-38428","versionConstraint":"< 1.21-1+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"wget","version":"1.21-1+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-38428","fix":{"state":"fixed","versions":["1.21-1+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.21-1+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38428","cwe":"CWE-436","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-38428","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38428","date":"2026-10-08","epss":0.00672,"percentile":0.50539}],"risk":0.60816,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-38428","description":"url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent."},"relatedVulnerabilities":[{"id":"CVE-2024-38428","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38428","cwe":"CWE-436","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-38428","cwe":"CWE-436","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38428","date":"2026-10-08","epss":0.00672,"percentile":0.50539}],"urls":["https://git.savannah.gnu.org/cgit/wget.git/commit/?id=ed0c7c7e0e8f7298352646b2fd6e06a11e242ace","https://lists.gnu.org/archive/html/bug-wget/2024-06/msg00005.html","https://lists.debian.org/debian-lts-announce/2025/04/msg00029.html","https://security.netapp.com/advisory/ntap-20241115-0005/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-38428","description":"url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent."}]},{"artifact":{"id":"718123fef188f3ba","cpes":["cpe:2.3:a:jenkins:google_login:1.7:*:*:*:*:jenkins:*:*"],"name":"google-login","purl":"pkg:maven/org.jenkins-ci.plugins/google-login@1.7","type":"jenkins-plugin","version":"1.7","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/ref/plugins/google-login.jpi","manifestName":"","pomArtifactID":"google-login","archiveDigests":[{"value":"b079f24ecd833cd5a1856821c48eaa6e5d6b5b59","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/google-login.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/google-login.jpi","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-g58x-57fv-86jh","versionConstraint":"<=1.7 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:google-login","version":"1.7"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-g58x-57fv-86jh","fix":{"state":"fixed","versions":["1.8"],"available":[{"date":"2024-01-10","kind":"first-observed","version":"1.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-41936","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-41936","date":"2026-10-08","epss":0.00809,"percentile":0.55567}],"risk":0.60675,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-41936","https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3228","http://www.openwall.com/lists/oss-security/2023/09/06/9","https://github.com/jenkinsci/google-login-plugin/commit/2273af025ad06ee13ab73a5a070b10689c2db61e"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-g58x-57fv-86jh","description":"Jenkins Google Login Plugin non-constant time token comparison"},"relatedVulnerabilities":[{"id":"CVE-2023-41936","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-41936","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-41936","date":"2026-10-08","epss":0.00809,"percentile":0.55567}],"urls":["http://www.openwall.com/lists/oss-security/2023/09/06/9","https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3228"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-41936","description":"Jenkins Google Login Plugin 1.7 and earlier uses a non-constant time comparison function when checking whether the provided and expected token are equal, potentially allowing attackers to use statistical methods to obtain a valid token."}]},{"artifact":{"id":"ea4957ea9317902b","cpes":["cpe:2.3:a:jenkins:google_login:1.7:*:*:*:*:jenkins:*:*"],"name":"google-login","purl":"pkg:maven/org.jenkins-ci.plugins/google-login@1.7","type":"jenkins-plugin","version":"1.7","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/google-login.jar","manifestName":"","pomArtifactID":"google-login","archiveDigests":[{"value":"8a4b1f8d91c3db10a731b18f70de22fa4d29aee8","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/google-login.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/google-login.jpi:WEB-INF/lib/google-login.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-g58x-57fv-86jh","versionConstraint":"<=1.7 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:google-login","version":"1.7"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-g58x-57fv-86jh","fix":{"state":"fixed","versions":["1.8"],"available":[{"date":"2024-01-10","kind":"first-observed","version":"1.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-41936","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-41936","date":"2026-10-08","epss":0.00809,"percentile":0.55567}],"risk":0.60675,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-41936","https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3228","http://www.openwall.com/lists/oss-security/2023/09/06/9","https://github.com/jenkinsci/google-login-plugin/commit/2273af025ad06ee13ab73a5a070b10689c2db61e"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-g58x-57fv-86jh","description":"Jenkins Google Login Plugin non-constant time token comparison"},"relatedVulnerabilities":[{"id":"CVE-2023-41936","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-41936","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-41936","date":"2026-10-08","epss":0.00809,"percentile":0.55567}],"urls":["http://www.openwall.com/lists/oss-security/2023/09/06/9","https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3228"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-41936","description":"Jenkins Google Login Plugin 1.7 and earlier uses a non-constant time comparison function when checking whether the provided and expected token are equal, potentially allowing attackers to use statistical methods to obtain a valid token."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42766","versionConstraint":"< 1.1.1w-0+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-42766","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u8"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"1.1.1w-0+deb11u8"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42766","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42766","date":"2026-10-08","epss":0.0111,"percentile":0.64898}],"risk":0.6049500000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-42766","description":"Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption.  Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service.  The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as OPTIONAL in the ASN.1 specification and may therefore be absent in specially crafted inputs. During the password-based CMS decryption the OpenSSL CMS implementation dereferences this field without first checking whether it was present.  An attacker who supplies such a CMS message to an application performing password-based CMS decryption can trigger an application crash, leading to a Denial of Service.  Applications that process password-encrypted CMS messages may be affected.  The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-42766","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42766","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42766","date":"2026-10-08","epss":0.0111,"percentile":0.64898}],"urls":["https://github.com/openssl/openssl/commit/056d06c1918fafbb98c1c85a02e4c47cc4e199ce","https://github.com/openssl/openssl/commit/12bc26ffb3a2be728c9b86e1cae277de5b33dfa4","https://github.com/openssl/openssl/commit/3ff64913615d648cfbb6a6f1cf5529ae7ea829d7","https://github.com/openssl/openssl/commit/ab52d88cb5374876d59aee3c91f9e4ccce2b7ce4","https://github.com/openssl/openssl/commit/da26f368732b83e40e9d356fe61c3d3aaab6d2e8","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42766","description":"Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-42766","versionConstraint":"< 1.1.1w-0+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-42766","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u8"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"1.1.1w-0+deb11u8"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42766","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42766","date":"2026-10-08","epss":0.0111,"percentile":0.64898}],"risk":0.6049500000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-42766","description":"Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption.  Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service.  The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as OPTIONAL in the ASN.1 specification and may therefore be absent in specially crafted inputs. During the password-based CMS decryption the OpenSSL CMS implementation dereferences this field without first checking whether it was present.  An attacker who supplies such a CMS message to an application performing password-based CMS decryption can trigger an application crash, leading to a Denial of Service.  Applications that process password-encrypted CMS messages may be affected.  The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-42766","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42766","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42766","date":"2026-10-08","epss":0.0111,"percentile":0.64898}],"urls":["https://github.com/openssl/openssl/commit/056d06c1918fafbb98c1c85a02e4c47cc4e199ce","https://github.com/openssl/openssl/commit/12bc26ffb3a2be728c9b86e1cae277de5b33dfa4","https://github.com/openssl/openssl/commit/3ff64913615d648cfbb6a6f1cf5529ae7ea829d7","https://github.com/openssl/openssl/commit/ab52d88cb5374876d59aee3c91f9e4ccce2b7ce4","https://github.com/openssl/openssl/commit/da26f368732b83e40e9d356fe61c3d3aaab6d2e8","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42766","description":"Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28390","versionConstraint":"< 1.1.1w-0+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-28390","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u7"],"available":[{"date":"2026-06-10","kind":"first-observed","version":"1.1.1w-0+deb11u7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28390","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28390","date":"2026-10-08","epss":0.00805,"percentile":0.55424}],"risk":0.6037499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-28390","description":"Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen.  Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service.  When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing.  Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-28390","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28390","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28390","date":"2026-10-08","epss":0.00805,"percentile":0.55424}],"urls":["https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc","https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6","https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4","https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788","https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28390","description":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28390","versionConstraint":"< 1.1.1w-0+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-28390","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u7"],"available":[{"date":"2026-06-10","kind":"first-observed","version":"1.1.1w-0+deb11u7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28390","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28390","date":"2026-10-08","epss":0.00805,"percentile":0.55424}],"risk":0.6037499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-28390","description":"Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen.  Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service.  When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing.  Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-28390","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28390","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28390","date":"2026-10-08","epss":0.00805,"percentile":0.55424}],"urls":["https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc","https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6","https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4","https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788","https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28390","description":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.9"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-0397","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.14||>= 3.11.0, < 3.11.9||>= 3.12.0, < 3.12.3||>= 3.13.0a1, < 3.13.0a5||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.9"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-0397","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.14||>= 3.11.0, < 3.11.9||>= 3.12.0, < 3.12.3||>= 3.13.0a1, < 3.13.0a5||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-0397","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.14","3.11.9","3.12.3","3.13.0a5"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.9"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.3"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0a5"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.14"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.9"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.3"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0a5"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0397","cwe":"CWE-362","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0397","date":"2026-10-08","epss":0.0081,"percentile":0.55628}],"risk":0.60345,"urls":["http://www.openwall.com/lists/oss-security/2024/06/17/2","https://github.com/python/cpython/commit/01c37f1d0714f5822d34063ca7180b595abf589d","https://github.com/python/cpython/commit/29c97287d205bf2f410f4895ebce3f43b5160524","https://github.com/python/cpython/commit/37324b421b72b7bc9934e27aba85d48d4773002e","https://github.com/python/cpython/commit/542f3272f56f31ed04e74c40635a913fbc12d286","https://github.com/python/cpython/commit/b228655c227b2ca298a8ffac44d14ce3d22f6faa","https://github.com/python/cpython/commit/bce693111bff906ccf9281c22371331aaff766ab","https://github.com/python/cpython/issues/114572","https://github.com/python/cpython/pull/114573","https://mail.python.org/archives/list/security-announce@python.org/thread/BMAK5BCGKYWNJOACVUSLUF6SFGBIM4VP/","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://security.netapp.com/advisory/ntap-20250411-0006/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0397","description":"A defect was discovered in the Python “ssl” module where there is a memory\nrace condition with the ssl.SSLContext methods “cert_store_stats()” and\n“get_ca_certs()”. The race condition can be triggered if the methods are\ncalled at the same time as certificates are loaded into the SSLContext,\nsuch as during the TLS handshake with a certificate directory configured.\nThis issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5."},"relatedVulnerabilities":[]},{"artifact":{"id":"a06dc8850c1b1b35","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.10-2\\+deb11u5:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.7&upstream=expat","type":"deb","version":"2.2.10-2+deb11u5","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66046","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"expat","version":"2.2.10-2+deb11u5"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-66046","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66046","cwe":"CWE-407","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66046","date":"2026-10-08","epss":0.00742,"percentile":0.53269}],"risk":0.60102,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-66046","description":"Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an O(N^2) linear scan of elementType->defaultAtts to determine CDATA status. A remote unauthenticated attacker can supply a single well-formed XML document of a few megabytes to an application parsing untrusted XML to cause excessive CPU consumption, resulting in denial of service without requiring authentication, external entity resolution, or non-default parser options."},"relatedVulnerabilities":[{"id":"CVE-2026-66046","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66046","cwe":"CWE-407","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66046","date":"2026-10-08","epss":0.00742,"percentile":0.53269}],"urls":["https://github.com/libexpat/libexpat/pull/1321","https://www.vulncheck.com/advisories/expat-denial-of-service-via-storeatts-quadratic-complexity"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66046","description":"Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an O(N^2) linear scan of elementType->defaultAtts to determine CDATA status. A remote unauthenticated attacker can supply a single well-formed XML document of a few megabytes to an application parsing untrusted XML to cause excessive CPU consumption, resulting in denial of service without requiring authentication, external entity resolution, or non-default parser options."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.25.10"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-4977","versionConstraint":"<1.25.10||>=1.26.0-0,<1.26.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-4977","fix":{"state":"fixed","versions":["1.25.10","1.26.3"],"available":[{"date":"2026-05-07","kind":"release","version":"1.25.10"},{"date":"2026-05-07","kind":"release","version":"1.26.3"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42499","cwe":"CWE-1046","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42499","date":"2026-10-08","epss":0.00798,"percentile":0.5517}],"risk":0.5984999999999999,"urls":["https://go.dev/cl/771520","https://groups.google.com/g/golang-announce/c/qcCIEXso47M"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/78987","description":"Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322."},"relatedVulnerabilities":[{"id":"CVE-2026-42499","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42499","cwe":"CWE-1046","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42499","date":"2026-10-08","epss":0.00798,"percentile":0.5517}],"urls":["https://go.dev/cl/771520","https://go.dev/issue/78987","https://groups.google.com/g/golang-announce/c/qcCIEXso47M","https://pkg.go.dev/vuln/GO-2026-4977","https://access.redhat.com/errata/RHSA-2026:17713","https://access.redhat.com/errata/RHSA-2026:17714","https://access.redhat.com/errata/RHSA-2026:22112","https://access.redhat.com/errata/RHSA-2026:22120","https://access.redhat.com/errata/RHSA-2026:22121","https://access.redhat.com/errata/RHSA-2026:33120","https://access.redhat.com/errata/RHSA-2026:33123","https://access.redhat.com/errata/RHSA-2026:33142","https://access.redhat.com/errata/RHSA-2026:33150","https://access.redhat.com/errata/RHSA-2026:33574","https://access.redhat.com/errata/RHSA-2026:34364","https://access.redhat.com/errata/RHSA-2026:36319","https://access.redhat.com/errata/RHSA-2026:36625","https://access.redhat.com/errata/RHSA-2026:36754","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:42146","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:43052","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:47952","https://access.redhat.com/errata/RHSA-2026:49702","https://access.redhat.com/errata/RHSA-2026:49712","https://access.redhat.com/errata/RHSA-2026:50300","https://access.redhat.com/errata/RHSA-2026:50319","https://access.redhat.com/errata/RHSA-2026:50336","https://access.redhat.com/errata/RHSA-2026:50843","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:51112","https://access.redhat.com/errata/RHSA-2026:54274","https://access.redhat.com/errata/RHSA-2026:54283","https://access.redhat.com/errata/RHSA-2026:54284","https://access.redhat.com/errata/RHSA-2026:54285","https://access.redhat.com/errata/RHSA-2026:54286","https://access.redhat.com/errata/RHSA-2026:54287","https://access.redhat.com/errata/RHSA-2026:54531","https://access.redhat.com/errata/RHSA-2026:54552","https://access.redhat.com/errata/RHSA-2026:54555","https://access.redhat.com/errata/RHSA-2026:54583","https://access.redhat.com/errata/RHSA-2026:54602","https://access.redhat.com/errata/RHSA-2026:56340","https://access.redhat.com/errata/RHSA-2026:56785","https://access.redhat.com/errata/RHSA-2026:56789","https://access.redhat.com/errata/RHSA-2026:56852","https://access.redhat.com/errata/RHSA-2026:56854","https://access.redhat.com/errata/RHSA-2026:56910","https://access.redhat.com/errata/RHSA-2026:56912","https://access.redhat.com/errata/RHSA-2026:57194","https://access.redhat.com/errata/RHSA-2026:57482","https://access.redhat.com/errata/RHSA-2026:57487","https://access.redhat.com/errata/RHSA-2026:57649","https://access.redhat.com/errata/RHSA-2026:57845","https://access.redhat.com/errata/RHSA-2026:57914","https://access.redhat.com/errata/RHSA-2026:59467","https://access.redhat.com/errata/RHSA-2026:59830","https://access.redhat.com/errata/RHSA-2026:59833","https://access.redhat.com/errata/RHSA-2026:60018","https://access.redhat.com/errata/RHSA-2026:60023","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61253","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:62406","https://access.redhat.com/errata/RHSA-2026:62407","https://access.redhat.com/errata/RHSA-2026:62753","https://access.redhat.com/errata/RHSA-2026:62754","https://access.redhat.com/errata/RHSA-2026:62803","https://access.redhat.com/errata/RHSA-2026:63022","https://access.redhat.com/errata/RHSA-2026:63163","https://access.redhat.com/errata/RHSA-2026:63332","https://access.redhat.com/errata/RHSA-2026:63636","https://access.redhat.com/errata/RHSA-2026:64818","https://access.redhat.com/errata/RHSA-2026:65116","https://access.redhat.com/errata/RHSA-2026:65117","https://access.redhat.com/errata/RHSA-2026:65153","https://access.redhat.com/errata/RHSA-2026:65335","https://access.redhat.com/errata/RHSA-2026:65336","https://access.redhat.com/errata/RHSA-2026:65534","https://access.redhat.com/errata/RHSA-2026:65838","https://access.redhat.com/errata/RHSA-2026:65886","https://access.redhat.com/errata/RHSA-2026:65895","https://access.redhat.com/errata/RHSA-2026:66022","https://access.redhat.com/errata/RHSA-2026:66327","https://access.redhat.com/errata/RHSA-2026:67148","https://access.redhat.com/errata/RHSA-2026:67517","https://access.redhat.com/errata/RHSA-2026:67974","https://access.redhat.com/errata/RHSA-2026:67975","https://access.redhat.com/errata/RHSA-2026:68334","https://access.redhat.com/errata/RHSA-2026:68504","https://access.redhat.com/errata/RHSA-2026:68527","https://access.redhat.com/security/cve/CVE-2026-42499","https://bugzilla.redhat.com/show_bug.cgi?id=2467809","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42499","description":"Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-8924","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-8924","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8924","cwe":"CWE-201","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-8924","date":"2026-10-08","epss":0.00661,"percentile":0.50067}],"risk":0.5982050000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-8924","description":"A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains."},"relatedVulnerabilities":[{"id":"CVE-2026-8924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8924","cwe":"CWE-201","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-8924","date":"2026-10-08","epss":0.00661,"percentile":0.50067}],"urls":["https://curl.se/docs/CVE-2026-8924.html","https://curl.se/docs/CVE-2026-8924.json","https://hackerone.com/reports/3733905"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8924","description":"A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set\n\"super cookies\" that bypass the Public Suffix List check. This enables an\nattacker-controlled origin to inject cookies that curl subsequently scopes and\ntransmits to unrelated third-party domains."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8924","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-8924","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8924","cwe":"CWE-201","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-8924","date":"2026-10-08","epss":0.00661,"percentile":0.50067}],"risk":0.5982050000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-8924","description":"A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains."},"relatedVulnerabilities":[{"id":"CVE-2026-8924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8924","cwe":"CWE-201","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-8924","date":"2026-10-08","epss":0.00661,"percentile":0.50067}],"urls":["https://curl.se/docs/CVE-2026-8924.html","https://curl.se/docs/CVE-2026-8924.json","https://hackerone.com/reports/3733905"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8924","description":"A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set\n\"super cookies\" that bypass the Public Suffix List check. This enables an\nattacker-controlled origin to inject cookies that curl subsequently scopes and\ntransmits to unrelated third-party domains."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8924","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-8924","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8924","cwe":"CWE-201","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-8924","date":"2026-10-08","epss":0.00661,"percentile":0.50067}],"risk":0.5982050000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-8924","description":"A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains."},"relatedVulnerabilities":[{"id":"CVE-2026-8924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8924","cwe":"CWE-201","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-8924","date":"2026-10-08","epss":0.00661,"percentile":0.50067}],"urls":["https://curl.se/docs/CVE-2026-8924.html","https://curl.se/docs/CVE-2026-8924.json","https://hackerone.com/reports/3733905"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8924","description":"A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set\n\"super cookies\" that bypass the Public Suffix List check. This enables an\nattacker-controlled origin to inject cookies that curl subsequently scopes and\ntransmits to unrelated third-party domains."}]},{"artifact":{"id":"b1b865057b4a53ab","cpes":["cpe:2.3:a:libsystemd0:libsystemd0:247.3-7\\+deb11u2:*:*:*:*:*:*:*"],"name":"libsystemd0","purl":"pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=systemd","type":"deb","version":"247.3-7+deb11u2","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsystemd0/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libsystemd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"fix":{"suggestedVersion":"247.3-7+deb11u7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4598","versionConstraint":"< 247.3-7+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"systemd","version":"247.3-7+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-4598","fix":{"state":"fixed","versions":["247.3-7+deb11u7"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"247.3-7+deb11u7"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4598","cwe":"CWE-364","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4598","date":"2026-10-08","epss":0.01233,"percentile":0.68108}],"risk":0.598005,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-4598","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.  A SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality."},"relatedVulnerabilities":[{"id":"CVE-2025-4598","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4598","cwe":"CWE-364","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4598","date":"2026-10-08","epss":0.01233,"percentile":0.68108}],"urls":["https://access.redhat.com/errata/RHSA-2025:22660","https://access.redhat.com/errata/RHSA-2025:22868","https://access.redhat.com/errata/RHSA-2025:23227","https://access.redhat.com/errata/RHSA-2025:23234","https://access.redhat.com/errata/RHSA-2026:0414","https://access.redhat.com/errata/RHSA-2026:1652","https://access.redhat.com/errata/RHSA-2026:18153","https://access.redhat.com/security/cve/CVE-2025-4598","https://bugzilla.redhat.com/show_bug.cgi?id=2369242","https://www.openwall.com/lists/oss-security/2025/05/29/3","http://seclists.org/fulldisclosure/2025/Jun/9","http://www.openwall.com/lists/oss-security/2025/06/05/1","http://www.openwall.com/lists/oss-security/2025/06/05/3","http://www.openwall.com/lists/oss-security/2025/08/18/3","https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598","https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/","https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html","https://www.openwall.com/lists/oss-security/2025/08/18/3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4598","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality."}]},{"artifact":{"id":"7eda2e8b2cc08c93","cpes":["cpe:2.3:a:libudev1:libudev1:247.3-7\\+deb11u2:*:*:*:*:*:*:*"],"name":"libudev1","purl":"pkg:deb/debian/libudev1@247.3-7%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=systemd","type":"deb","version":"247.3-7+deb11u2","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libudev1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libudev1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libudev1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libudev1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"fix":{"suggestedVersion":"247.3-7+deb11u7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4598","versionConstraint":"< 247.3-7+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"systemd","version":"247.3-7+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-4598","fix":{"state":"fixed","versions":["247.3-7+deb11u7"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"247.3-7+deb11u7"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4598","cwe":"CWE-364","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4598","date":"2026-10-08","epss":0.01233,"percentile":0.68108}],"risk":0.598005,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-4598","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.  A SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality."},"relatedVulnerabilities":[{"id":"CVE-2025-4598","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4598","cwe":"CWE-364","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4598","date":"2026-10-08","epss":0.01233,"percentile":0.68108}],"urls":["https://access.redhat.com/errata/RHSA-2025:22660","https://access.redhat.com/errata/RHSA-2025:22868","https://access.redhat.com/errata/RHSA-2025:23227","https://access.redhat.com/errata/RHSA-2025:23234","https://access.redhat.com/errata/RHSA-2026:0414","https://access.redhat.com/errata/RHSA-2026:1652","https://access.redhat.com/errata/RHSA-2026:18153","https://access.redhat.com/security/cve/CVE-2025-4598","https://bugzilla.redhat.com/show_bug.cgi?id=2369242","https://www.openwall.com/lists/oss-security/2025/05/29/3","http://seclists.org/fulldisclosure/2025/Jun/9","http://www.openwall.com/lists/oss-security/2025/06/05/1","http://www.openwall.com/lists/oss-security/2025/06/05/3","http://www.openwall.com/lists/oss-security/2025/08/18/3","https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598","https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/","https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html","https://www.openwall.com/lists/oss-security/2025/08/18/3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4598","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality."}]},{"artifact":{"id":"0c6d9eb7e240419d","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40355","versionConstraint":"< 1.18.3-6+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-40355","fix":{"state":"fixed","versions":["1.18.3-6+deb11u8"],"available":[{"date":"2026-05-29","kind":"first-observed","version":"1.18.3-6+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-08","epss":0.00792,"percentile":0.54983}],"risk":0.594,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."},"relatedVulnerabilities":[{"id":"CVE-2026-40355","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-08","epss":0.00792,"percentile":0.54983}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."}]},{"artifact":{"id":"f494d08983d799f9","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40355","versionConstraint":"< 1.18.3-6+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-40355","fix":{"state":"fixed","versions":["1.18.3-6+deb11u8"],"available":[{"date":"2026-05-29","kind":"first-observed","version":"1.18.3-6+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-08","epss":0.00792,"percentile":0.54983}],"risk":0.594,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."},"relatedVulnerabilities":[{"id":"CVE-2026-40355","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-08","epss":0.00792,"percentile":0.54983}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."}]},{"artifact":{"id":"f5bdc85523d7b0b5","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40355","versionConstraint":"< 1.18.3-6+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-40355","fix":{"state":"fixed","versions":["1.18.3-6+deb11u8"],"available":[{"date":"2026-05-29","kind":"first-observed","version":"1.18.3-6+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-08","epss":0.00792,"percentile":0.54983}],"risk":0.594,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."},"relatedVulnerabilities":[{"id":"CVE-2026-40355","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-08","epss":0.00792,"percentile":0.54983}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."}]},{"artifact":{"id":"aabb6f84bfd71a76","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40355","versionConstraint":"< 1.18.3-6+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-40355","fix":{"state":"fixed","versions":["1.18.3-6+deb11u8"],"available":[{"date":"2026-05-29","kind":"first-observed","version":"1.18.3-6+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-08","epss":0.00792,"percentile":0.54983}],"risk":0.594,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."},"relatedVulnerabilities":[{"id":"CVE-2026-40355","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40355","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40355","date":"2026-10-08","epss":0.00792,"percentile":0.54983}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40355","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message."}]},{"artifact":{"id":"e974360838add45f","cpes":["cpe:2.3:a:golang:crypto:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4","type":"go-module","version":"v0.0.0-20220411220226-7b82a4e95df4","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.52.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5cgq-3rg8-m6cv","versionConstraint":"<0.52.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.0.0-20220411220226-7b82a4e95df4"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-5cgq-3rg8-m6cv","fix":{"state":"fixed","versions":["0.52.0"],"available":[{"date":"2026-07-07","kind":"first-observed","version":"0.52.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42508","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-42508","cwe":"CWE-295","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42508","date":"2026-10-08","epss":0.00654,"percentile":0.49763}],"risk":0.59187,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-42508","https://go.dev/cl/781220","https://go.dev/issue/79568","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5021","https://access.redhat.com/errata/RHSA-2026:23262","https://access.redhat.com/errata/RHSA-2026:23264","https://access.redhat.com/security/cve/CVE-2026-42508","https://bugzilla.redhat.com/show_bug.cgi?id=2480688","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42508.json","https://access.redhat.com/errata/RHSA-2026:26546","https://access.redhat.com/errata/RHSA-2026:26547","https://access.redhat.com/errata/RHSA-2026:35833","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:37123","https://access.redhat.com/errata/RHSA-2026:37072","https://access.redhat.com/errata/RHSA-2026:36808","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:40138","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:41064","https://access.redhat.com/errata/RHSA-2026:41036","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:40945"],"severity":"Critical","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5cgq-3rg8-m6cv","description":"golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status"},"relatedVulnerabilities":[{"id":"CVE-2026-42508","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42508","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-42508","cwe":"CWE-295","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42508","date":"2026-10-08","epss":0.00654,"percentile":0.49763}],"urls":["https://go.dev/cl/781220","https://go.dev/issue/79568","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5021","https://access.redhat.com/errata/RHSA-2026:23262","https://access.redhat.com/errata/RHSA-2026:23264","https://access.redhat.com/errata/RHSA-2026:26546","https://access.redhat.com/errata/RHSA-2026:26547","https://access.redhat.com/errata/RHSA-2026:35833","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:36808","https://access.redhat.com/errata/RHSA-2026:37072","https://access.redhat.com/errata/RHSA-2026:37123","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:41036","https://access.redhat.com/errata/RHSA-2026:41064","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:42146","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:43052","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:46885","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:47737","https://access.redhat.com/errata/RHSA-2026:49944","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:51288","https://access.redhat.com/errata/RHSA-2026:52857","https://access.redhat.com/errata/RHSA-2026:52910","https://access.redhat.com/errata/RHSA-2026:54400","https://access.redhat.com/errata/RHSA-2026:57194","https://access.redhat.com/errata/RHSA-2026:59467","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61314","https://access.redhat.com/errata/RHSA-2026:65126","https://access.redhat.com/errata/RHSA-2026:66022","https://access.redhat.com/errata/RHSA-2026:66521","https://access.redhat.com/errata/RHSA-2026:67450","https://access.redhat.com/security/cve/CVE-2026-42508","https://bugzilla.redhat.com/show_bug.cgi?id=2480688","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42508.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42508","description":"Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.25.10"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-4986","versionConstraint":"<1.25.10||>=1.26.0-0,<1.26.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-4986","fix":{"state":"fixed","versions":["1.25.10","1.26.3"],"available":[{"date":"2026-05-07","kind":"release","version":"1.25.10"},{"date":"2026-05-07","kind":"release","version":"1.26.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39820","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-39820","cwe":"CWE-606","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39820","date":"2026-10-08","epss":0.00784,"percentile":0.54677}],"risk":0.588,"urls":["https://go.dev/cl/759940","https://groups.google.com/g/golang-announce/c/qcCIEXso47M"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/78566","description":"Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations."},"relatedVulnerabilities":[{"id":"CVE-2026-39820","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39820","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-39820","cwe":"CWE-606","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39820","date":"2026-10-08","epss":0.00784,"percentile":0.54677}],"urls":["https://go.dev/cl/759940","https://go.dev/issue/78566","https://groups.google.com/g/golang-announce/c/qcCIEXso47M","https://pkg.go.dev/vuln/GO-2026-4986","https://access.redhat.com/errata/RHSA-2026:22112","https://access.redhat.com/errata/RHSA-2026:22120","https://access.redhat.com/errata/RHSA-2026:22121","https://access.redhat.com/errata/RHSA-2026:23262","https://access.redhat.com/errata/RHSA-2026:23264","https://access.redhat.com/errata/RHSA-2026:33120","https://access.redhat.com/errata/RHSA-2026:33123","https://access.redhat.com/errata/RHSA-2026:33142","https://access.redhat.com/errata/RHSA-2026:33150","https://access.redhat.com/errata/RHSA-2026:33574","https://access.redhat.com/errata/RHSA-2026:34364","https://access.redhat.com/errata/RHSA-2026:36319","https://access.redhat.com/errata/RHSA-2026:36625","https://access.redhat.com/errata/RHSA-2026:36754","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:42146","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:43052","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:47952","https://access.redhat.com/errata/RHSA-2026:49702","https://access.redhat.com/errata/RHSA-2026:49712","https://access.redhat.com/errata/RHSA-2026:50205","https://access.redhat.com/errata/RHSA-2026:50300","https://access.redhat.com/errata/RHSA-2026:50319","https://access.redhat.com/errata/RHSA-2026:50336","https://access.redhat.com/errata/RHSA-2026:50843","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:51112","https://access.redhat.com/errata/RHSA-2026:54274","https://access.redhat.com/errata/RHSA-2026:54283","https://access.redhat.com/errata/RHSA-2026:54284","https://access.redhat.com/errata/RHSA-2026:54285","https://access.redhat.com/errata/RHSA-2026:54286","https://access.redhat.com/errata/RHSA-2026:54287","https://access.redhat.com/errata/RHSA-2026:54531","https://access.redhat.com/errata/RHSA-2026:54552","https://access.redhat.com/errata/RHSA-2026:54555","https://access.redhat.com/errata/RHSA-2026:54583","https://access.redhat.com/errata/RHSA-2026:54602","https://access.redhat.com/errata/RHSA-2026:54883","https://access.redhat.com/errata/RHSA-2026:56340","https://access.redhat.com/errata/RHSA-2026:56789","https://access.redhat.com/errata/RHSA-2026:56852","https://access.redhat.com/errata/RHSA-2026:56854","https://access.redhat.com/errata/RHSA-2026:57194","https://access.redhat.com/errata/RHSA-2026:57401","https://access.redhat.com/errata/RHSA-2026:57482","https://access.redhat.com/errata/RHSA-2026:57487","https://access.redhat.com/errata/RHSA-2026:57649","https://access.redhat.com/errata/RHSA-2026:57845","https://access.redhat.com/errata/RHSA-2026:57914","https://access.redhat.com/errata/RHSA-2026:59467","https://access.redhat.com/errata/RHSA-2026:59830","https://access.redhat.com/errata/RHSA-2026:59833","https://access.redhat.com/errata/RHSA-2026:60018","https://access.redhat.com/errata/RHSA-2026:60023","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61253","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:62406","https://access.redhat.com/errata/RHSA-2026:62407","https://access.redhat.com/errata/RHSA-2026:62753","https://access.redhat.com/errata/RHSA-2026:62754","https://access.redhat.com/errata/RHSA-2026:62803","https://access.redhat.com/errata/RHSA-2026:63022","https://access.redhat.com/errata/RHSA-2026:65116","https://access.redhat.com/errata/RHSA-2026:65117","https://access.redhat.com/errata/RHSA-2026:65153","https://access.redhat.com/errata/RHSA-2026:65335","https://access.redhat.com/errata/RHSA-2026:65336","https://access.redhat.com/errata/RHSA-2026:65534","https://access.redhat.com/errata/RHSA-2026:65838","https://access.redhat.com/errata/RHSA-2026:65886","https://access.redhat.com/errata/RHSA-2026:65895","https://access.redhat.com/errata/RHSA-2026:66016","https://access.redhat.com/errata/RHSA-2026:66022","https://access.redhat.com/errata/RHSA-2026:66327","https://access.redhat.com/errata/RHSA-2026:67517","https://access.redhat.com/errata/RHSA-2026:67974","https://access.redhat.com/errata/RHSA-2026:67975","https://access.redhat.com/errata/RHSA-2026:68334","https://access.redhat.com/errata/RHSA-2026:68504","https://access.redhat.com/errata/RHSA-2026:68527","https://access.redhat.com/security/cve/CVE-2026-39820","https://bugzilla.redhat.com/show_bug.cgi?id=2467820","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39820.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-39820","description":"Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations."}]},{"artifact":{"id":"0c6d9eb7e240419d","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40356","versionConstraint":"< 1.18.3-6+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-40356","fix":{"state":"fixed","versions":["1.18.3-6+deb11u8"],"available":[{"date":"2026-05-29","kind":"first-observed","version":"1.18.3-6+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-08","epss":0.00783,"percentile":0.54659}],"risk":0.58725,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."},"relatedVulnerabilities":[{"id":"CVE-2026-40356","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-08","epss":0.00783,"percentile":0.54659}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."}]},{"artifact":{"id":"f494d08983d799f9","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40356","versionConstraint":"< 1.18.3-6+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-40356","fix":{"state":"fixed","versions":["1.18.3-6+deb11u8"],"available":[{"date":"2026-05-29","kind":"first-observed","version":"1.18.3-6+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-08","epss":0.00783,"percentile":0.54659}],"risk":0.58725,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."},"relatedVulnerabilities":[{"id":"CVE-2026-40356","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-08","epss":0.00783,"percentile":0.54659}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."}]},{"artifact":{"id":"f5bdc85523d7b0b5","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40356","versionConstraint":"< 1.18.3-6+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-40356","fix":{"state":"fixed","versions":["1.18.3-6+deb11u8"],"available":[{"date":"2026-05-29","kind":"first-observed","version":"1.18.3-6+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-08","epss":0.00783,"percentile":0.54659}],"risk":0.58725,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."},"relatedVulnerabilities":[{"id":"CVE-2026-40356","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-08","epss":0.00783,"percentile":0.54659}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."}]},{"artifact":{"id":"aabb6f84bfd71a76","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40356","versionConstraint":"< 1.18.3-6+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-40356","fix":{"state":"fixed","versions":["1.18.3-6+deb11u8"],"available":[{"date":"2026-05-29","kind":"first-observed","version":"1.18.3-6+deb11u8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-08","epss":0.00783,"percentile":0.54659}],"risk":0.58725,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."},"relatedVulnerabilities":[{"id":"CVE-2026-40356","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40356","cwe":"CWE-191","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40356","date":"2026-10-08","epss":0.00783,"percentile":0.54659}],"urls":["https://cems.fun/2026/04/27/krb5-two-unauthenticated-network-vulnerabilities.html","https://github.com/krb5/krb5/commit/2e75f0d9362fb979f5fc92829431a590a130929f","https://web.mit.edu/kerberos/advisories/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40356","description":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message."}]},{"artifact":{"id":"c103c066c49ae324","cpes":["cpe:2.3:a:golang:networking:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2","type":"go-module","version":"v0.0.0-20211112202133-69e39bad7dc2","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.53.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-4918","versionConstraint":"<0.53.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.0.0-20211112202133-69e39bad7dc2"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-4918","fix":{"state":"fixed","versions":["0.53.0"],"available":[{"date":"2026-04-09","kind":"release","version":"0.53.0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33814","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-33814","cwe":"CWE-606","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33814","date":"2026-10-08","epss":0.00781,"percentile":0.54602}],"risk":0.58575,"urls":["https://go.dev/cl/761640","https://go.dev/issue/78476","https://groups.google.com/g/golang-announce/c/qcCIEXso47M"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/761581","description":"When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0."},"relatedVulnerabilities":[{"id":"CVE-2026-33814","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33814","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-33814","cwe":"CWE-606","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33814","date":"2026-10-08","epss":0.00781,"percentile":0.54602}],"urls":["https://go.dev/cl/761581","https://go.dev/cl/761640","https://go.dev/issue/78476","https://groups.google.com/g/golang-announce/c/qcCIEXso47M","https://pkg.go.dev/vuln/GO-2026-4918","https://access.redhat.com/errata/RHSA-2026:22112","https://access.redhat.com/errata/RHSA-2026:22120","https://access.redhat.com/errata/RHSA-2026:22121","https://access.redhat.com/errata/RHSA-2026:23262","https://access.redhat.com/errata/RHSA-2026:23264","https://access.redhat.com/errata/RHSA-2026:33120","https://access.redhat.com/errata/RHSA-2026:33123","https://access.redhat.com/errata/RHSA-2026:33142","https://access.redhat.com/errata/RHSA-2026:33150","https://access.redhat.com/errata/RHSA-2026:34342","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:49702","https://access.redhat.com/errata/RHSA-2026:49712","https://access.redhat.com/errata/RHSA-2026:50205","https://access.redhat.com/errata/RHSA-2026:54274","https://access.redhat.com/errata/RHSA-2026:54283","https://access.redhat.com/errata/RHSA-2026:54284","https://access.redhat.com/errata/RHSA-2026:54285","https://access.redhat.com/errata/RHSA-2026:54286","https://access.redhat.com/errata/RHSA-2026:54287","https://access.redhat.com/errata/RHSA-2026:56854","https://access.redhat.com/errata/RHSA-2026:56912","https://access.redhat.com/errata/RHSA-2026:57191","https://access.redhat.com/errata/RHSA-2026:57194","https://access.redhat.com/errata/RHSA-2026:57365","https://access.redhat.com/errata/RHSA-2026:57367","https://access.redhat.com/errata/RHSA-2026:57408","https://access.redhat.com/errata/RHSA-2026:57545","https://access.redhat.com/errata/RHSA-2026:57649","https://access.redhat.com/errata/RHSA-2026:57845","https://access.redhat.com/errata/RHSA-2026:59833","https://access.redhat.com/errata/RHSA-2026:60023","https://access.redhat.com/errata/RHSA-2026:60025","https://access.redhat.com/errata/RHSA-2026:60441","https://access.redhat.com/errata/RHSA-2026:60442","https://access.redhat.com/errata/RHSA-2026:60446","https://access.redhat.com/errata/RHSA-2026:60447","https://access.redhat.com/errata/RHSA-2026:60454","https://access.redhat.com/errata/RHSA-2026:60477","https://access.redhat.com/errata/RHSA-2026:60478","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:60668","https://access.redhat.com/errata/RHSA-2026:61253","https://access.redhat.com/errata/RHSA-2026:62410","https://access.redhat.com/errata/RHSA-2026:62550","https://access.redhat.com/errata/RHSA-2026:62551","https://access.redhat.com/errata/RHSA-2026:63046","https://access.redhat.com/errata/RHSA-2026:63047","https://access.redhat.com/errata/RHSA-2026:63048","https://access.redhat.com/errata/RHSA-2026:63050","https://access.redhat.com/errata/RHSA-2026:63091","https://access.redhat.com/errata/RHSA-2026:63096","https://access.redhat.com/errata/RHSA-2026:63097","https://access.redhat.com/errata/RHSA-2026:63103","https://access.redhat.com/errata/RHSA-2026:63104","https://access.redhat.com/errata/RHSA-2026:63636","https://access.redhat.com/errata/RHSA-2026:63637","https://access.redhat.com/errata/RHSA-2026:63639","https://access.redhat.com/errata/RHSA-2026:65126","https://access.redhat.com/errata/RHSA-2026:66350","https://access.redhat.com/security/cve/CVE-2026-33814","https://bugzilla.redhat.com/show_bug.cgi?id=2467815","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33814.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33814","description":"When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.25.10"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-4918","versionConstraint":"<1.25.10||>=1.26.0-0,<1.26.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-4918","fix":{"state":"fixed","versions":["1.25.10","1.26.3"],"available":[{"date":"2026-05-07","kind":"release","version":"1.25.10"},{"date":"2026-05-07","kind":"release","version":"1.26.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33814","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-33814","cwe":"CWE-606","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33814","date":"2026-10-08","epss":0.00781,"percentile":0.54602}],"risk":0.58575,"urls":["https://go.dev/cl/761640","https://go.dev/issue/78476","https://groups.google.com/g/golang-announce/c/qcCIEXso47M"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/761581","description":"When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0."},"relatedVulnerabilities":[{"id":"CVE-2026-33814","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33814","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-33814","cwe":"CWE-606","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33814","date":"2026-10-08","epss":0.00781,"percentile":0.54602}],"urls":["https://go.dev/cl/761581","https://go.dev/cl/761640","https://go.dev/issue/78476","https://groups.google.com/g/golang-announce/c/qcCIEXso47M","https://pkg.go.dev/vuln/GO-2026-4918","https://access.redhat.com/errata/RHSA-2026:22112","https://access.redhat.com/errata/RHSA-2026:22120","https://access.redhat.com/errata/RHSA-2026:22121","https://access.redhat.com/errata/RHSA-2026:23262","https://access.redhat.com/errata/RHSA-2026:23264","https://access.redhat.com/errata/RHSA-2026:33120","https://access.redhat.com/errata/RHSA-2026:33123","https://access.redhat.com/errata/RHSA-2026:33142","https://access.redhat.com/errata/RHSA-2026:33150","https://access.redhat.com/errata/RHSA-2026:34342","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:49702","https://access.redhat.com/errata/RHSA-2026:49712","https://access.redhat.com/errata/RHSA-2026:50205","https://access.redhat.com/errata/RHSA-2026:54274","https://access.redhat.com/errata/RHSA-2026:54283","https://access.redhat.com/errata/RHSA-2026:54284","https://access.redhat.com/errata/RHSA-2026:54285","https://access.redhat.com/errata/RHSA-2026:54286","https://access.redhat.com/errata/RHSA-2026:54287","https://access.redhat.com/errata/RHSA-2026:56854","https://access.redhat.com/errata/RHSA-2026:56912","https://access.redhat.com/errata/RHSA-2026:57191","https://access.redhat.com/errata/RHSA-2026:57194","https://access.redhat.com/errata/RHSA-2026:57365","https://access.redhat.com/errata/RHSA-2026:57367","https://access.redhat.com/errata/RHSA-2026:57408","https://access.redhat.com/errata/RHSA-2026:57545","https://access.redhat.com/errata/RHSA-2026:57649","https://access.redhat.com/errata/RHSA-2026:57845","https://access.redhat.com/errata/RHSA-2026:59833","https://access.redhat.com/errata/RHSA-2026:60023","https://access.redhat.com/errata/RHSA-2026:60025","https://access.redhat.com/errata/RHSA-2026:60441","https://access.redhat.com/errata/RHSA-2026:60442","https://access.redhat.com/errata/RHSA-2026:60446","https://access.redhat.com/errata/RHSA-2026:60447","https://access.redhat.com/errata/RHSA-2026:60454","https://access.redhat.com/errata/RHSA-2026:60477","https://access.redhat.com/errata/RHSA-2026:60478","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:60668","https://access.redhat.com/errata/RHSA-2026:61253","https://access.redhat.com/errata/RHSA-2026:62410","https://access.redhat.com/errata/RHSA-2026:62550","https://access.redhat.com/errata/RHSA-2026:62551","https://access.redhat.com/errata/RHSA-2026:63046","https://access.redhat.com/errata/RHSA-2026:63047","https://access.redhat.com/errata/RHSA-2026:63048","https://access.redhat.com/errata/RHSA-2026:63050","https://access.redhat.com/errata/RHSA-2026:63091","https://access.redhat.com/errata/RHSA-2026:63096","https://access.redhat.com/errata/RHSA-2026:63097","https://access.redhat.com/errata/RHSA-2026:63103","https://access.redhat.com/errata/RHSA-2026:63104","https://access.redhat.com/errata/RHSA-2026:63636","https://access.redhat.com/errata/RHSA-2026:63637","https://access.redhat.com/errata/RHSA-2026:63639","https://access.redhat.com/errata/RHSA-2026:65126","https://access.redhat.com/errata/RHSA-2026:66350","https://access.redhat.com/security/cve/CVE-2026-33814","https://bugzilla.redhat.com/show_bug.cgi?id=2467815","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33814.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33814","description":"When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-46219","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-46219","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46219","cwe":"CWE-311","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-46219","cwe":"CWE-311","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-46219","date":"2026-10-08","epss":0.01133,"percentile":0.65448}],"risk":0.583495,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-46219","description":"When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use."},"relatedVulnerabilities":[{"id":"CVE-2023-46219","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46219","cwe":"CWE-311","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-46219","cwe":"CWE-311","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-46219","date":"2026-10-08","epss":0.01133,"percentile":0.65448}],"urls":["https://curl.se/docs/CVE-2023-46219.html","https://hackerone.com/reports/2236133","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/","https://security.netapp.com/advisory/ntap-20240119-0007/","https://www.debian.org/security/2023/dsa-5587","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-46219","description":"When saving HSTS data to an excessively long file name, curl could end up\nremoving all contents, making subsequent requests using that file unaware of\nthe HSTS status they should otherwise use."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-46219","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-46219","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46219","cwe":"CWE-311","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-46219","cwe":"CWE-311","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-46219","date":"2026-10-08","epss":0.01133,"percentile":0.65448}],"risk":0.583495,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-46219","description":"When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use."},"relatedVulnerabilities":[{"id":"CVE-2023-46219","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46219","cwe":"CWE-311","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-46219","cwe":"CWE-311","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-46219","date":"2026-10-08","epss":0.01133,"percentile":0.65448}],"urls":["https://curl.se/docs/CVE-2023-46219.html","https://hackerone.com/reports/2236133","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/","https://security.netapp.com/advisory/ntap-20240119-0007/","https://www.debian.org/security/2023/dsa-5587","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-46219","description":"When saving HSTS data to an excessively long file name, curl could end up\nremoving all contents, making subsequent requests using that file unaware of\nthe HSTS status they should otherwise use."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-46219","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-46219","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46219","cwe":"CWE-311","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-46219","cwe":"CWE-311","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-46219","date":"2026-10-08","epss":0.01133,"percentile":0.65448}],"risk":0.583495,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-46219","description":"When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use."},"relatedVulnerabilities":[{"id":"CVE-2023-46219","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46219","cwe":"CWE-311","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-46219","cwe":"CWE-311","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-46219","date":"2026-10-08","epss":0.01133,"percentile":0.65448}],"urls":["https://curl.se/docs/CVE-2023-46219.html","https://hackerone.com/reports/2236133","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/","https://security.netapp.com/advisory/ntap-20240119-0007/","https://www.debian.org/security/2023/dsa-5587","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-46219","description":"When saving HSTS data to an excessively long file name, curl could end up\nremoving all contents, making subsequent requests using that file unaware of\nthe HSTS status they should otherwise use."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6923","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.5||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.10"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-6923","versionConstraint":"< 3.8.20||>= 3.10.0, < 3.10.15||>= 3.11.0, < 3.11.10||>= 3.12.0, < 3.12.5||>= 3.13.0a1, < 3.13.0rc2||>= 3.9.0, < 3.9.20 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-6923","fix":{"state":"fixed","versions":["3.8.20","3.9.20","3.10.15","3.11.10","3.12.5","3.13.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.8.20"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.10"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.5"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.0rc2"},{"date":"2026-09-22","kind":"first-observed","version":"3.9.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.8.20"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.15"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.10"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.5"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.0rc2"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.20"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.5,"impactScore":3.4,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6923","cwe":"CWE-94","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-6923","date":"2026-10-08","epss":0.011,"percentile":0.64652}],"risk":0.5775,"urls":["https://github.com/python/cpython/commit/06f28dc236708f72871c64d4bc4b4ea144c50147","https://github.com/python/cpython/commit/097633981879b3c9de9a1dd120d3aa585ecc2384","https://github.com/python/cpython/commit/4766d1200fdf8b6728137aa2927a297e224d5fa7","https://github.com/python/cpython/commit/4aaa4259b5a6e664b7316a4d60bdec7ee0f124d0","https://github.com/python/cpython/commit/b158a76ce094897c870fb6b3de62887b7ccc33f1","https://github.com/python/cpython/commit/f7be505d137a22528cb0fc004422c0081d5d90e6","https://github.com/python/cpython/commit/f7c0f09e69e950cf3c5ada9dbde93898eb975533","https://github.com/python/cpython/issues/121650","https://github.com/python/cpython/pull/122233","https://mail.python.org/archives/list/security-announce@python.org/thread/QH3BUOE2DYQBWP7NAQ7UNHPPOELKISRW/","http://www.openwall.com/lists/oss-security/2024/08/01/3","http://www.openwall.com/lists/oss-security/2024/08/02/2","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/01/msg00005.html","https://security.netapp.com/advisory/ntap-20240926-0003/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6923","description":"There is a MEDIUM severity vulnerability affecting CPython.\n\nThe \nemail module didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized."},"relatedVulnerabilities":[]},{"artifact":{"id":"e974360838add45f","cpes":["cpe:2.3:a:golang:crypto:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4","type":"go-module","version":"v0.0.0-20220411220226-7b82a4e95df4","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.52.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rm3j-f69w-wqmq","versionConstraint":"<0.52.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.0.0-20220411220226-7b82a4e95df4"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-rm3j-f69w-wqmq","fix":{"state":"fixed","versions":["0.52.0"],"available":[{"date":"2026-07-07","kind":"first-observed","version":"0.52.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39834","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-39834","date":"2026-10-08","epss":0.00637,"percentile":0.48909}],"risk":0.576485,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-39834","https://go.dev/cl/781663","https://go.dev/issue/79567","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5020"],"severity":"Critical","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rm3j-f69w-wqmq","description":"golang.org/x/crypto vulnerable to infinite loop on large channel writes"},"relatedVulnerabilities":[{"id":"CVE-2026-39834","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39834","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-39834","date":"2026-10-08","epss":0.00637,"percentile":0.48909}],"urls":["https://go.dev/cl/781663","https://go.dev/issue/79567","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5020"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-39834","description":"When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-11940","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-11940","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-11940","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b4"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b4"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-12","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-12","kind":"first-observed","version":"3.14.7"},{"date":"2026-07-30","kind":"first-observed","version":"3.15.0b4"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11940","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11940","cwe":"CWE-59","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11940","date":"2026-10-08","epss":0.0075,"percentile":0.53541}],"risk":0.57375,"urls":["https://github.com/python/cpython/commit/0f852b3f07dd8e71e40326a51c02afbf16a42cc5","https://github.com/python/cpython/commit/27dd970bf6b17ebca7c8ed486a40ab043ed7af8f","https://github.com/python/cpython/commit/672825e2f36a57e173959b0d9d409d4560dab8df","https://github.com/python/cpython/commit/771d12dda5140313db0ac550292987975651bbde","https://github.com/python/cpython/commit/79c06bd5c6afa3c440d50faf7ee1b147c8832b4c","https://github.com/python/cpython/commit/be13e86f6b9788a6f4d0419dffef72cbae5865c9","https://github.com/python/cpython/commit/e5fdbd8d5aa923bd9111b112ea73bd6ec7c47877","https://github.com/python/cpython/issues/151558","https://github.com/python/cpython/pull/151559","https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11940","description":"tarfile.extractall() with the 'data' or 'tar'\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself.  \nThe extraction fallback validated the symlink at it's archived location \nbut recreated it at the hardlink's shallower\npath, letting a relative\n target the filter judged contained escape the destination directory.  \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330."},"relatedVulnerabilities":[]},{"artifact":{"id":"35529043948e0377","cpes":["cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1-6:libtasn1_6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1-6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1_6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1-6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1_6:4.16.0-2\\+deb11u1:*:*:*:*:*:*:*"],"name":"libtasn1-6","purl":"pkg:deb/debian/libtasn1-6@4.16.0-2%2Bdeb11u1?arch=amd64&distro=debian-11.7","type":"deb","version":"4.16.0-2+deb11u1","language":"","licenses":["sha256:ab2f3532a1bf45d90643e92c1dfb985982698ecbf63f12595acfd9598d36350d"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtasn1-6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libtasn1-6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.16.0-2+deb11u2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-12133","versionConstraint":"< 4.16.0-2+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"libtasn1-6","version":"4.16.0-2+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-12133","fix":{"state":"fixed","versions":["4.16.0-2+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"4.16.0-2+deb11u2"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-12133","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-12133","date":"2026-10-08","epss":0.0111,"percentile":0.64902}],"risk":0.57165,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-12133","description":"A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack."},"relatedVulnerabilities":[{"id":"CVE-2024-12133","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-12133","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-12133","date":"2026-10-08","epss":0.0111,"percentile":0.64902}],"urls":["https://access.redhat.com/errata/RHSA-2025:17347","https://access.redhat.com/errata/RHSA-2025:4049","https://access.redhat.com/errata/RHSA-2025:7077","https://access.redhat.com/errata/RHSA-2025:8021","https://access.redhat.com/errata/RHSA-2025:8385","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/security/cve/CVE-2024-12133","https://bugzilla.redhat.com/show_bug.cgi?id=2344611","https://gitlab.com/gnutls/libtasn1/-/blob/master/doc/security/CVE-2024-12133.md","https://gitlab.com/gnutls/libtasn1/-/issues/52","http://www.openwall.com/lists/oss-security/2025/02/06/6","https://lists.debian.org/debian-lts-announce/2025/02/msg00025.html","https://security.netapp.com/advisory/ntap-20250523-0003/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-12133","description":"A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack."}]},{"artifact":{"id":"46d3fb386aab3fd6","cpes":["cpe:2.3:a:bouncycastle-org:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bcprov_jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov_jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov_jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov_jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov_jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov_jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov_jdk15on:1.70:*:*:*:*:*:*:*"],"name":"bcprov-jdk15on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70","type":"java-archive","version":"1.70","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/bouncycastle-api.hpi:WEB-INF/optional-lib/bcprov-jdk15on-1.70.jar","manifestName":"","pomArtifactID":"bcprov-jdk15on","archiveDigests":[{"value":"4636a0d01f74acaf28082fb62b317f1080118371","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/bouncycastle-api.hpi:WEB-INF/optional-lib/bcprov-jdk15on-1.70.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.78"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8xfc-gm6g-vgpv","versionConstraint":"<1.78 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcprov-jdk15on","version":"1.70"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-8xfc-gm6g-vgpv","fix":{"state":"fixed","versions":["1.78"],"available":[{"date":"2024-05-15","kind":"first-observed","version":"1.78"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-29857","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-29857","date":"2026-10-08","epss":0.011,"percentile":0.64664}],"risk":0.5665,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-29857","https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857","https://www.bouncycastle.org/latest_releases.html","https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63","https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281","https://github.com/bcgit/bc-java/commit/efc498ca4caa340ac2fe11f2efee06c1a294501f","https://security.netapp.com/advisory/ntap-20241206-0008"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8xfc-gm6g-vgpv","description":"Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation."},"relatedVulnerabilities":[{"id":"CVE-2024-29857","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-29857","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-29857","date":"2026-10-08","epss":0.011,"percentile":0.64664}],"urls":["https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857","https://www.bouncycastle.org/latest_releases.html","https://security.netapp.com/advisory/ntap-20241206-0008/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-29857","description":"An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters."}]},{"artifact":{"id":"7d44d2d3a3f39959","cpes":["cpe:2.3:a:bouncycastle-org:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bcprov_jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov_jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov_jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk18on:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk18on:bcprov_jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk18on:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk18on:bcprov_jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov_jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov_jdk18on:1.73:*:*:*:*:*:*:*"],"name":"bcprov-jdk18on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk18on@1.73","type":"java-archive","version":"1.73","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/usr/share/jenkins/ref/plugins/bouncycastle-api.jpi:WEB-INF/optional-lib/bcprov-jdk18on-1.73.jar","manifestName":"","pomArtifactID":"bcprov-jdk18on","archiveDigests":[{"value":"4bd3de48e5153059fe3f80cbcf86ea221795ee55","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/bouncycastle-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/bouncycastle-api.jpi:WEB-INF/optional-lib/bcprov-jdk18on-1.73.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.78"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8xfc-gm6g-vgpv","versionConstraint":"<1.78 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcprov-jdk18on","version":"1.73"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-8xfc-gm6g-vgpv","fix":{"state":"fixed","versions":["1.78"],"available":[{"date":"2024-05-15","kind":"first-observed","version":"1.78"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-29857","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-29857","date":"2026-10-08","epss":0.011,"percentile":0.64664}],"risk":0.5665,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-29857","https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857","https://www.bouncycastle.org/latest_releases.html","https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63","https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281","https://github.com/bcgit/bc-java/commit/efc498ca4caa340ac2fe11f2efee06c1a294501f","https://security.netapp.com/advisory/ntap-20241206-0008"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8xfc-gm6g-vgpv","description":"Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation."},"relatedVulnerabilities":[{"id":"CVE-2024-29857","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-29857","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-29857","date":"2026-10-08","epss":0.011,"percentile":0.64664}],"urls":["https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857","https://www.bouncycastle.org/latest_releases.html","https://security.netapp.com/advisory/ntap-20241206-0008/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-29857","description":"An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.22"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-20926","versionConstraint":"< 1.8.0_402||>= 1.9, < 8.0.402||>= 9, < 11.0.22 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-20926","fix":{"state":"fixed","versions":["1.8.0_402","8.0.402","11.0.22"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_402"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.402"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.22"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-20926","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-20926","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-20926","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-20926","date":"2026-10-08","epss":0.01035,"percentile":0.62783}],"risk":0.564075,"urls":["https://lists.debian.org/debian-lts-announce/2024/01/msg00023.html","https://security.netapp.com/advisory/ntap-20240201-0002/","https://www.oracle.com/security-alerts/cpujan2024.html","https://security.netapp.com/advisory/ntap-20241108-0002/","https://openjdk.org/groups/vulnerability/advisories/2024-01-16"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-20926","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"a06dc8850c1b1b35","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.10-2\\+deb11u5:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5?arch=amd64&distro=debian-11.7&upstream=expat","type":"deb","version":"2.2.10-2+deb11u5","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.2.10-2+deb11u7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-50602","versionConstraint":"< 2.2.10-2+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"expat","version":"2.2.10-2+deb11u5"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-50602","fix":{"state":"fixed","versions":["2.2.10-2+deb11u7"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"2.2.10-2+deb11u7"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-50602","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-50602","date":"2026-10-08","epss":0.01033,"percentile":0.62707}],"risk":0.5629850000000001,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-50602","description":"An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser."},"relatedVulnerabilities":[{"id":"CVE-2024-50602","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-50602","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-50602","date":"2026-10-08","epss":0.01033,"percentile":0.62707}],"urls":["https://github.com/libexpat/libexpat/pull/915","https://lists.debian.org/debian-lts-announce/2025/04/msg00040.html","https://security.netapp.com/advisory/ntap-20250404-0008/","https://docs.python.org/release/3.10.16/whatsnew/changelog.html","https://docs.python.org/release/3.11.11/whatsnew/changelog.html#python-3-11-11","https://docs.python.org/release/3.12.8/whatsnew/changelog.html#python-3-12-8","https://docs.python.org/release/3.13.1/whatsnew/changelog.html#python-3-13-1","https://docs.python.org/release/3.9.21/whatsnew/changelog.html","https://github.com/python/cpython/issues/126623"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-50602","description":"An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-50602","versionConstraint":"< 3.9.21||>= 3.10, < 3.10.16||>= 3.11, < 3.11.11||>= 3.12, < 3.12.8||>= 3.13, < 3.13.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.11"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-50602","versionConstraint":"< 3.9.21||>= 3.10, < 3.10.16||>= 3.11, < 3.11.11||>= 3.12, < 3.12.8||>= 3.13, < 3.13.1 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-50602","fix":{"state":"fixed","versions":["3.9.21","3.10.16","3.11.11","3.12.8","3.13.1"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.11"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.8"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.1"},{"date":"2025-09-04","kind":"first-observed","version":"3.9.21"},{"date":"2025-09-04","kind":"first-observed","version":"3.10.16"},{"date":"2025-09-04","kind":"first-observed","version":"3.11.11"},{"date":"2025-09-04","kind":"first-observed","version":"3.12.8"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-50602","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-50602","date":"2026-10-08","epss":0.01033,"percentile":0.62707}],"risk":0.5629850000000001,"urls":["https://github.com/libexpat/libexpat/pull/915","https://lists.debian.org/debian-lts-announce/2025/04/msg00040.html","https://security.netapp.com/advisory/ntap-20250404-0008/","https://docs.python.org/release/3.10.16/whatsnew/changelog.html","https://docs.python.org/release/3.11.11/whatsnew/changelog.html#python-3-11-11","https://docs.python.org/release/3.12.8/whatsnew/changelog.html#python-3-12-8","https://docs.python.org/release/3.13.1/whatsnew/changelog.html#python-3-13-1","https://docs.python.org/release/3.9.21/whatsnew/changelog.html","https://github.com/python/cpython/issues/126623"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-50602","description":"An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser."},"relatedVulnerabilities":[]},{"artifact":{"id":"e974360838add45f","cpes":["cpe:2.3:a:golang:crypto:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4","type":"go-module","version":"v0.0.0-20220411220226-7b82a4e95df4","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.52.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vgwf-h737-ff37","versionConstraint":"<0.52.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.0.0-20220411220226-7b82a4e95df4"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-vgwf-h737-ff37","fix":{"state":"fixed","versions":["0.52.0"],"available":[{"date":"2026-07-07","kind":"first-observed","version":"0.52.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39830","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-39830","cwe":"CWE-772","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39830","date":"2026-10-08","epss":0.00621,"percentile":0.48178}],"risk":0.5620050000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-39830","https://go.dev/cl/781640","https://go.dev/cl/781664","https://go.dev/issue/79564","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5017","https://access.redhat.com/errata/RHSA-2026:29455","https://access.redhat.com/security/cve/CVE-2026-39830","https://bugzilla.redhat.com/show_bug.cgi?id=2480684","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39830.json","https://access.redhat.com/errata/RHSA-2026:35833","https://access.redhat.com/errata/RHSA-2026:36199","https://access.redhat.com/errata/RHSA-2026:36207","https://access.redhat.com/errata/RHSA-2026:36319","https://access.redhat.com/errata/RHSA-2026:36625","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:37271","https://access.redhat.com/errata/RHSA-2026:37268","https://access.redhat.com/errata/RHSA-2026:37072","https://access.redhat.com/errata/RHSA-2026:36808","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:37296","https://access.redhat.com/errata/RHSA-2026:37286","https://access.redhat.com/errata/RHSA-2026:37278","https://access.redhat.com/errata/RHSA-2026:37275","https://access.redhat.com/errata/RHSA-2026:37272","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:40969","https://access.redhat.com/errata/RHSA-2026:40974","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:40972","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:41036","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:42146","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:43052","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:46885","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:49944","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:52857","https://access.redhat.com/errata/RHSA-2026:52910","https://access.redhat.com/errata/RHSA-2026:54400","https://access.redhat.com/errata/RHSA-2026:54531","https://access.redhat.com/errata/RHSA-2026:57194","https://access.redhat.com/errata/RHSA-2026:57801","https://access.redhat.com/errata/RHSA-2026:59467","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61314","https://access.redhat.com/errata/RHSA-2026:65964","https://access.redhat.com/errata/RHSA-2026:66022","https://access.redhat.com/errata/RHSA-2026:66521","https://access.redhat.com/errata/RHSA-2026:67450"],"severity":"Critical","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vgwf-h737-ff37","description":"golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses"},"relatedVulnerabilities":[{"id":"CVE-2026-39830","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39830","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-39830","cwe":"CWE-772","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39830","date":"2026-10-08","epss":0.00621,"percentile":0.48178}],"urls":["https://go.dev/cl/781640","https://go.dev/cl/781664","https://go.dev/issue/79564","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5017","https://access.redhat.com/errata/RHSA-2026:29455","https://access.redhat.com/errata/RHSA-2026:35833","https://access.redhat.com/errata/RHSA-2026:36199","https://access.redhat.com/errata/RHSA-2026:36207","https://access.redhat.com/errata/RHSA-2026:36319","https://access.redhat.com/errata/RHSA-2026:36625","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:36808","https://access.redhat.com/errata/RHSA-2026:37072","https://access.redhat.com/errata/RHSA-2026:37268","https://access.redhat.com/errata/RHSA-2026:37271","https://access.redhat.com/errata/RHSA-2026:37272","https://access.redhat.com/errata/RHSA-2026:37275","https://access.redhat.com/errata/RHSA-2026:37278","https://access.redhat.com/errata/RHSA-2026:37286","https://access.redhat.com/errata/RHSA-2026:37296","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:40969","https://access.redhat.com/errata/RHSA-2026:40972","https://access.redhat.com/errata/RHSA-2026:40974","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:41036","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:42146","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:43052","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:46885","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:49944","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:52857","https://access.redhat.com/errata/RHSA-2026:52910","https://access.redhat.com/errata/RHSA-2026:54400","https://access.redhat.com/errata/RHSA-2026:54531","https://access.redhat.com/errata/RHSA-2026:57194","https://access.redhat.com/errata/RHSA-2026:57801","https://access.redhat.com/errata/RHSA-2026:59467","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61314","https://access.redhat.com/errata/RHSA-2026:65964","https://access.redhat.com/errata/RHSA-2026:66022","https://access.redhat.com/errata/RHSA-2026:66521","https://access.redhat.com/errata/RHSA-2026:67450","https://access.redhat.com/security/cve/CVE-2026-39830","https://bugzilla.redhat.com/show_bug.cgi?id=2480684","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39830.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-39830","description":"A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded."}]},{"artifact":{"id":"ddbb4689be67d9fa","cpes":["cpe:2.3:a:org.eclipse.jetty:jetty-server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty_server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-server:jetty-server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-server:jetty_server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_server:jetty-server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_server:jetty_server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty-server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty_server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-server:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty-server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty_server:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_server:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty:10.0.15:*:*:*:*:*:*:*"],"name":"jetty-server","purl":"pkg:maven/org.eclipse.jetty/jetty-server@10.0.15","type":"java-archive","version":"10.0.15","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jetty","virtualPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar:org.eclipse.jetty:jetty-server","manifestName":"","pomArtifactID":"jetty-server","archiveDigests":null},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"10.0.24"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-g8m5-722r-8whq","versionConstraint":">=10.0.0,<=10.0.23 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jetty:jetty-server","version":"10.0.15"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-g8m5-722r-8whq","fix":{"state":"fixed","versions":["10.0.24"],"available":[{"date":"2024-10-15","kind":"first-observed","version":"10.0.24"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-8184","cwe":"CWE-400","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2024-8184","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-8184","date":"2026-10-08","epss":0.0103,"percentile":0.62628}],"risk":0.56135,"urls":["https://github.com/jetty/jetty.project/security/advisories/GHSA-g8m5-722r-8whq","https://nvd.nist.gov/vuln/detail/CVE-2024-8184","https://github.com/jetty/jetty.project/pull/11723","https://gitlab.eclipse.org/security/cve-assignement/-/issues/30","https://lists.debian.org/debian-lts-announce/2025/04/msg00001.html"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-g8m5-722r-8whq","description":"Eclipse Jetty's ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks"},"relatedVulnerabilities":[{"id":"CVE-2024-8184","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-8184","cwe":"CWE-400","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2024-8184","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-8184","date":"2026-10-08","epss":0.0103,"percentile":0.62628}],"urls":["https://github.com/jetty/jetty.project/pull/11723","https://github.com/jetty/jetty.project/security/advisories/GHSA-g8m5-722r-8whq","https://gitlab.eclipse.org/security/cve-assignement/-/issues/30","https://lists.debian.org/debian-lts-announce/2025/04/msg00001.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-8184","description":"There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack.  By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-11972","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-11972","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-11972","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b4"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b4"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-12","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-12","kind":"first-observed","version":"3.14.7"},{"date":"2026-07-30","kind":"first-observed","version":"3.15.0b4"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-10-08","epss":0.00715,"percentile":0.52297}],"risk":0.561275,"urls":["https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9","https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365","https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21","https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec","https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192","https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896","https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438","https://github.com/python/cpython/issues/151981","https://github.com/python/cpython/pull/151982","https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11972","description":"When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer."},"relatedVulnerabilities":[]},{"artifact":{"id":"0c6d9eb7e240419d","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.18.3-6+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.18.3-6+deb11u5"],"available":[{"date":"2024-07-05","kind":"advisory","version":"1.18.3-6+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"risk":0.5609999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5726-1","link":"https://security-tracker.debian.org/tracker/DSA-5726-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"f494d08983d799f9","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.18.3-6+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.18.3-6+deb11u5"],"available":[{"date":"2024-07-05","kind":"advisory","version":"1.18.3-6+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"risk":0.5609999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5726-1","link":"https://security-tracker.debian.org/tracker/DSA-5726-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"f5bdc85523d7b0b5","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.18.3-6+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.18.3-6+deb11u5"],"available":[{"date":"2024-07-05","kind":"advisory","version":"1.18.3-6+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"risk":0.5609999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5726-1","link":"https://security-tracker.debian.org/tracker/DSA-5726-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"aabb6f84bfd71a76","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.18.3-6\\+deb11u3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=krb5","type":"deb","version":"1.18.3-6+deb11u3","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.18.3-6+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.18.3-6+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"krb5","version":"1.18.3-6+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.18.3-6+deb11u5"],"available":[{"date":"2024-07-05","kind":"advisory","version":"1.18.3-6+deb11u5"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"risk":0.5609999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[{"id":"DSA-5726-1","link":"https://security-tracker.debian.org/tracker/DSA-5726-1"}],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"b74732b8fd8b87cf","cpes":["cpe:2.3:a:libpng16-16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*","cpe:2.3:a:libpng16-16:libpng16_16:1.6.37-3:*:*:*:*:*:*:*","cpe:2.3:a:libpng16_16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*","cpe:2.3:a:libpng16_16:libpng16_16:1.6.37-3:*:*:*:*:*:*:*","cpe:2.3:a:libpng16:libpng16-16:1.6.37-3:*:*:*:*:*:*:*","cpe:2.3:a:libpng16:libpng16_16:1.6.37-3:*:*:*:*:*:*:*"],"name":"libpng16-16","purl":"pkg:deb/debian/libpng16-16@1.6.37-3?arch=amd64&distro=debian-11.7&upstream=libpng1.6","type":"deb","version":"1.6.37-3","language":"","licenses":["Apache-2.0","BSD-3-clause","BSD-like-with-advertising-clause","GPL-2","GPL-2+","expat","libpng"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpng16-16/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libpng16-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpng16-16:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libpng16-16:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libpng1.6"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.6.37-3+deb11u2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-25646","versionConstraint":"< 1.6.37-3+deb11u2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"libpng1.6","version":"1.6.37-3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-25646","fix":{"state":"fixed","versions":["1.6.37-3+deb11u2"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.6.37-3+deb11u2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-25646","cwe":"CWE-122","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-25646","cwe":"CWE-126","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-25646","cwe":"CWE-125","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-25646","date":"2026-10-08","epss":0.00718,"percentile":0.52432}],"risk":0.56004,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-25646","description":"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55."},"relatedVulnerabilities":[{"id":"CVE-2026-25646","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-25646","cwe":"CWE-122","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-25646","cwe":"CWE-126","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-25646","cwe":"CWE-125","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-25646","date":"2026-10-08","epss":0.00718,"percentile":0.52432}],"urls":["https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88","https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3","http://www.openwall.com/lists/oss-security/2026/02/09/7","https://access.redhat.com/errata/RHSA-2026:10097","https://access.redhat.com/errata/RHSA-2026:12274","https://access.redhat.com/errata/RHSA-2026:14773","https://access.redhat.com/errata/RHSA-2026:15087","https://access.redhat.com/errata/RHSA-2026:16174","https://access.redhat.com/errata/RHSA-2026:17596","https://access.redhat.com/errata/RHSA-2026:3031","https://access.redhat.com/errata/RHSA-2026:3405","https://access.redhat.com/errata/RHSA-2026:3551","https://access.redhat.com/errata/RHSA-2026:3573","https://access.redhat.com/errata/RHSA-2026:3574","https://access.redhat.com/errata/RHSA-2026:3575","https://access.redhat.com/errata/RHSA-2026:3576","https://access.redhat.com/errata/RHSA-2026:3577","https://access.redhat.com/errata/RHSA-2026:3968","https://access.redhat.com/errata/RHSA-2026:3969","https://access.redhat.com/errata/RHSA-2026:4221","https://access.redhat.com/errata/RHSA-2026:4222","https://access.redhat.com/errata/RHSA-2026:4306","https://access.redhat.com/errata/RHSA-2026:4501","https://access.redhat.com/errata/RHSA-2026:4728","https://access.redhat.com/errata/RHSA-2026:4729","https://access.redhat.com/errata/RHSA-2026:4730","https://access.redhat.com/errata/RHSA-2026:4731","https://access.redhat.com/errata/RHSA-2026:4732","https://access.redhat.com/errata/RHSA-2026:4756","https://access.redhat.com/errata/RHSA-2026:5606","https://access.redhat.com/errata/RHSA-2026:6439","https://access.redhat.com/errata/RHSA-2026:6445","https://access.redhat.com/errata/RHSA-2026:6466","https://access.redhat.com/errata/RHSA-2026:6467","https://access.redhat.com/errata/RHSA-2026:6468","https://access.redhat.com/errata/RHSA-2026:6469","https://access.redhat.com/errata/RHSA-2026:6553","https://access.redhat.com/errata/RHSA-2026:6732","https://access.redhat.com/errata/RHSA-2026:7032","https://access.redhat.com/errata/RHSA-2026:7033","https://access.redhat.com/errata/RHSA-2026:7034","https://access.redhat.com/errata/RHSA-2026:7035","https://access.redhat.com/errata/RHSA-2026:7036","https://access.redhat.com/errata/RHSA-2026:7239","https://access.redhat.com/errata/RHSA-2026:7243","https://access.redhat.com/errata/RHSA-2026:8746","https://access.redhat.com/errata/RHSA-2026:8747","https://access.redhat.com/errata/RHSA-2026:8748","https://access.redhat.com/security/cve/CVE-2026-25646","https://bugzilla.redhat.com/show_bug.cgi?id=2438542","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25646.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-25646","description":"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55."}]},{"artifact":{"id":"fea2584e9beef935","cpes":["cpe:2.3:a:libncurses6:libncurses6:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*"],"name":"libncurses6","purl":"pkg:deb/debian/libncurses6@6.2%2B20201114-2%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=ncurses","type":"deb","version":"6.2+20201114-2+deb11u1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libncurses6:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libncurses6:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/libtinfo6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libncurses6/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"ncurses","version":"6.2+20201114-2+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"risk":0.54855,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"6182dcee381f9d92","cpes":["cpe:2.3:a:libncursesw6:libncursesw6:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*"],"name":"libncursesw6","purl":"pkg:deb/debian/libncursesw6@6.2%2B20201114-2%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=ncurses","type":"deb","version":"6.2+20201114-2+deb11u1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libncursesw6:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libncursesw6:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/libtinfo6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libncursesw6/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"ncurses","version":"6.2+20201114-2+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"risk":0.54855,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"945144abaa7803e2","cpes":["cpe:2.3:a:libtinfo6:libtinfo6:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*"],"name":"libtinfo6","purl":"pkg:deb/debian/libtinfo6@6.2%2B20201114-2%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=ncurses","type":"deb","version":"6.2+20201114-2+deb11u1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtinfo6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libtinfo6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtinfo6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libtinfo6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"ncurses","version":"6.2+20201114-2+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"risk":0.54855,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"b46c40bd552e17f7","cpes":["cpe:2.3:a:ncurses-base:ncurses-base:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-base:ncurses_base:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses-base:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses_base:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-base:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_base:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*"],"name":"ncurses-base","purl":"pkg:deb/debian/ncurses-base@6.2%2B20201114-2%2Bdeb11u1?arch=all&distro=debian-11.7&upstream=ncurses","type":"deb","version":"6.2+20201114-2+deb11u1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/ncurses-base/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/ncurses-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-base.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/ncurses-base.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-base.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/ncurses-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-base.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/ncurses-base.list"}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"ncurses","version":"6.2+20201114-2+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"risk":0.54855,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"0c53b7825fe163e0","cpes":["cpe:2.3:a:ncurses-bin:ncurses-bin:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-bin:ncurses_bin:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_bin:ncurses-bin:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_bin:ncurses_bin:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-bin:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_bin:6.2\\+20201114-2\\+deb11u1:*:*:*:*:*:*:*"],"name":"ncurses-bin","purl":"pkg:deb/debian/ncurses-bin@6.2%2B20201114-2%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=ncurses","type":"deb","version":"6.2+20201114-2+deb11u1","language":"","licenses":["BSD-3-clause","MIT/X11","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/ncurses-bin/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/ncurses-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-bin.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/ncurses-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-bin.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/ncurses-bin.list"}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"ncurses","version":"6.2+20201114-2+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"risk":0.54855,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7383","versionConstraint":"< 1.1.1w-0+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-7383","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u8"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"1.1.1w-0+deb11u8"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7383","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-7383","date":"2026-10-08","epss":0.00701,"percentile":0.51746}],"risk":0.54678,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-7383","description":"Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow.  Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour.  In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a signed int: by left shift of the input character count for BMPSTRING (UTF-16) and UNIVERSALSTRING (UTF-32), and by summing per-character byte counts for UTF8STRING. The calculation overflows when the input reaches around 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30 characters) the size wraps to zero, OPENSSL_malloc(1) is called, and the subsequent character copy writes several gigabytes past the one-byte allocation.  X.509 certificate processing routes through ASN1_STRING_set_by_NID(), whose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID size limits cap the input length; no network protocol or certificate-handling path in OpenSSL exercises the overflow. Triggering the bug requires an application that calls ASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers a custom string type via ASN1_STRING_TABLE_add(), with attacker-controlled input on the order of half a gigabyte or more. For these reasons this issue was assigned Low severity.  The FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-7383","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7383","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-7383","date":"2026-10-08","epss":0.00701,"percentile":0.51746}],"urls":["https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6","https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74","https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974","https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083","https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7383","description":"Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-7383","versionConstraint":"< 1.1.1w-0+deb11u8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-7383","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u8"],"available":[{"date":"2026-06-16","kind":"first-observed","version":"1.1.1w-0+deb11u8"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7383","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-7383","date":"2026-10-08","epss":0.00701,"percentile":0.51746}],"risk":0.54678,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-7383","description":"Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow.  Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour.  In ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination size for Unicode output is computed in a signed int: by left shift of the input character count for BMPSTRING (UTF-16) and UNIVERSALSTRING (UTF-32), and by summing per-character byte counts for UTF8STRING. The calculation overflows when the input reaches around 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30 characters) the size wraps to zero, OPENSSL_malloc(1) is called, and the subsequent character copy writes several gigabytes past the one-byte allocation.  X.509 certificate processing routes through ASN1_STRING_set_by_NID(), whose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID size limits cap the input length; no network protocol or certificate-handling path in OpenSSL exercises the overflow. Triggering the bug requires an application that calls ASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers a custom string type via ASN1_STRING_TABLE_add(), with attacker-controlled input on the order of half a gigabyte or more. For these reasons this issue was assigned Low severity.  The FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-7383","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7383","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-7383","date":"2026-10-08","epss":0.00701,"percentile":0.51746}],"urls":["https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6","https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74","https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974","https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083","https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7383","description":"Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary."}]},{"artifact":{"id":"8f15488d1d4f1c9b","cpes":["cpe:2.3:a:jenkins:html_publisher:1.31:*:*:*:*:jenkins:*:*"],"name":"htmlpublisher","purl":"pkg:maven/org.jenkins-ci.plugins/htmlpublisher@1.31","type":"jenkins-plugin","version":"1.31","language":"java","licenses":["The MIT License (MIT)"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/ref/plugins/htmlpublisher.jpi:WEB-INF/lib/htmlpublisher.jar","manifestName":"","pomArtifactID":"htmlpublisher","archiveDigests":[{"value":"19f4f84beb29758d117e06d31eb7da6abac9f168","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/htmlpublisher.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/htmlpublisher.jpi:WEB-INF/lib/htmlpublisher.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.32.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8vcg-v7g4-3vr7","versionConstraint":">=1.16,<1.32.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:htmlpublisher","version":"1.31"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-8vcg-v7g4-3vr7","fix":{"state":"fixed","versions":["1.32.1"],"available":[{"date":"2024-03-08","kind":"first-observed","version":"1.32.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28149","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28149","date":"2026-10-08","epss":0.00704,"percentile":0.51855}],"risk":0.5456000000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-28149","https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3301","https://github.com/jenkinsci/htmlpublisher-plugin/commit/8bf2e2297a86ad50f7567fb953b2f8ec18b2891b","http://www.openwall.com/lists/oss-security/2024/03/06/3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8vcg-v7g4-3vr7","description":"Jenkins HTML Publisher Plugin does not properly sanitize input"},"relatedVulnerabilities":[{"id":"CVE-2024-28149","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28149","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28149","date":"2026-10-08","epss":0.00704,"percentile":0.51855}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/06/3","https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3301"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28149","description":"Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whether a path on the Jenkins controller file system exists."}]},{"artifact":{"id":"442d6a68f2c7f21a","cpes":["cpe:2.3:a:jenkins:html_publisher:1.31:*:*:*:*:jenkins:*:*"],"name":"htmlpublisher","purl":"pkg:maven/org.jenkins-ci.plugins/htmlpublisher@1.31","type":"jenkins-plugin","version":"1.31","language":"java","licenses":["The MIT License (MIT)"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/ref/plugins/htmlpublisher.jpi","manifestName":"","pomArtifactID":"htmlpublisher","archiveDigests":[{"value":"f5ec5effe328aa732b6cc86a72f1a735cd52db15","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/htmlpublisher.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/htmlpublisher.jpi","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.32.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8vcg-v7g4-3vr7","versionConstraint":">=1.16,<1.32.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:htmlpublisher","version":"1.31"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-8vcg-v7g4-3vr7","fix":{"state":"fixed","versions":["1.32.1"],"available":[{"date":"2024-03-08","kind":"first-observed","version":"1.32.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28149","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28149","date":"2026-10-08","epss":0.00704,"percentile":0.51855}],"risk":0.5456000000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-28149","https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3301","https://github.com/jenkinsci/htmlpublisher-plugin/commit/8bf2e2297a86ad50f7567fb953b2f8ec18b2891b","http://www.openwall.com/lists/oss-security/2024/03/06/3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8vcg-v7g4-3vr7","description":"Jenkins HTML Publisher Plugin does not properly sanitize input"},"relatedVulnerabilities":[{"id":"CVE-2024-28149","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28149","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28149","date":"2026-10-08","epss":0.00704,"percentile":0.51855}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/06/3","https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3301"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28149","description":"Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whether a path on the Jenkins controller file system exists."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.28"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-50106","versionConstraint":"< 1.8.0_462||>= 1.9, < 8.0.462||>= 12, < 17.0.16||>= 18, < 21.0.8||>= 22, < 24.0.2||>= 9, < 11.0.28 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-50106","fix":{"state":"fixed","versions":["1.8.0_462","8.0.462","11.0.28","17.0.16","21.0.8","24.0.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_462"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.462"},{"date":"2025-09-04","kind":"first-observed","version":"17.0.16"},{"date":"2025-09-04","kind":"first-observed","version":"21.0.8"},{"date":"2025-09-04","kind":"first-observed","version":"24.0.2"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.28"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-50106","date":"2026-10-08","epss":0.00699,"percentile":0.51669}],"risk":0.54522,"urls":["https://www.oracle.com/security-alerts/cpujul2025.html","https://lists.debian.org/debian-lts-announce/2025/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00014.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-50106","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."},"relatedVulnerabilities":[]},{"artifact":{"id":"5aa5fc0ebbc6f0c0","cpes":["cpe:2.3:a:org.jenkins-ci.main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:org.jenkins-ci.main:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_core:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins-ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins_ci:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:jenkins:jenkins_core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins-core:2.407:*:*:*:*:*:*:*","cpe:2.3:a:main:jenkins_core:2.407:*:*:*:*:*:*:*"],"name":"jenkins-core","purl":"pkg:maven/org.jenkins-ci.main/jenkins-core@2.407","type":"java-archive","version":"2.407","language":"java","licenses":["The MIT license"],"metadata":{"pomGroupID":"org.jenkins-ci.main","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","manifestName":"","pomArtifactID":"jenkins-core","archiveDigests":[{"value":"e7fc0a769dfabd6c316cde23c6bd1dd8a7c4d94b","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/jenkins-core-2.407.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.555"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-r6qv-frpc-q66c","versionConstraint":"<=2.554 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.main:jenkins-core","version":"2.407"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-r6qv-frpc-q66c","fix":{"state":"fixed","versions":["2.555"],"available":[{"date":"2026-03-20","kind":"first-observed","version":"2.555"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33001","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-33001","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33001","date":"2026-10-08","epss":0.00667,"percentile":0.50335}],"risk":0.543605,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-33001","https://www.jenkins.io/security/advisory/2026-03-18/#SECURITY-3657","https://github.com/jenkinsci/jenkins/commit/6dc99937605d5bddfeaae43a4cd14c2571e23adc","https://github.com/jenkinsci/jenkins/releases/tag/jenkins-2.555"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-r6qv-frpc-q66c","description":"Jenkins has a link following vulnerability allows arbitrary file creation"},"relatedVulnerabilities":[{"id":"CVE-2026-33001","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":6.1,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33001","cwe":"CWE-59","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-33001","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33001","date":"2026-10-08","epss":0.00667,"percentile":0.50335}],"urls":["https://www.jenkins.io/security/advisory/2026-03-18/#SECURITY-3657","https://access.redhat.com/errata/RHSA-2026:10199","https://access.redhat.com/errata/RHSA-2026:10201","https://access.redhat.com/errata/RHSA-2026:10204","https://access.redhat.com/errata/RHSA-2026:10205","https://access.redhat.com/errata/RHSA-2026:10206","https://access.redhat.com/errata/RHSA-2026:10209","https://access.redhat.com/errata/RHSA-2026:10211","https://access.redhat.com/errata/RHSA-2026:10213","https://access.redhat.com/errata/RHSA-2026:10214","https://access.redhat.com/errata/RHSA-2026:10215","https://access.redhat.com/security/cve/CVE-2026-33001","https://bugzilla.redhat.com/show_bug.cgi?id=2448645","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33001.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33001","description":"Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives, allowing crafted archives to write files to arbitrary locations on the filesystem, restricted only by file system access permissions of the user running Jenkins.\nThis can be exploited to deploy malicious scripts or plugins on the controller by attackers with Item/Configure permission, or able to control agent processes."}]},{"artifact":{"id":"c103c066c49ae324","cpes":["cpe:2.3:a:golang:networking:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2","type":"go-module","version":"v0.0.0-20211112202133-69e39bad7dc2","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.55.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-5026","versionConstraint":"<0.55.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.0.0-20211112202133-69e39bad7dc2"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-5026","fix":{"state":"fixed","versions":["0.55.0"],"available":[{"date":"2026-05-22","kind":"release","version":"0.55.0"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","metrics":{"baseScore":8.2,"impactScore":5.8,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39821","cwe":"CWE-1289","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-39821","cwe":"CWE-1289","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39821","date":"2026-10-08","epss":0.00692,"percentile":0.51378}],"risk":0.5432199999999999,"urls":["https://go.dev/issue/78760","https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8","https://groups.google.com/g/golang-announce/c/94pEornpRlI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/767220","description":"The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error.\n\nThis behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\"."},"relatedVulnerabilities":[{"id":"CVE-2026-39821","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","metrics":{"baseScore":8.2,"impactScore":5.8,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","metrics":{"baseScore":9.6,"impactScore":5.8,"exploitabilityScore":3.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39821","cwe":"CWE-1289","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-39821","cwe":"CWE-1289","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39821","date":"2026-10-08","epss":0.00692,"percentile":0.51378}],"urls":["https://go.dev/cl/767220","https://go.dev/issue/78760","https://groups.google.com/g/golang-announce/c/94pEornpRlI","https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8","https://pkg.go.dev/vuln/GO-2026-5026","https://access.redhat.com/errata/RHSA-2026:23262","https://access.redhat.com/errata/RHSA-2026:23264","https://access.redhat.com/errata/RHSA-2026:26546","https://access.redhat.com/errata/RHSA-2026:26547","https://access.redhat.com/errata/RHSA-2026:30650","https://access.redhat.com/errata/RHSA-2026:30651","https://access.redhat.com/errata/RHSA-2026:30853","https://access.redhat.com/errata/RHSA-2026:30854","https://access.redhat.com/errata/RHSA-2026:30855","https://access.redhat.com/errata/RHSA-2026:33155","https://access.redhat.com/errata/RHSA-2026:33160","https://access.redhat.com/errata/RHSA-2026:33163","https://access.redhat.com/errata/RHSA-2026:33173","https://access.redhat.com/errata/RHSA-2026:33183","https://access.redhat.com/errata/RHSA-2026:33524","https://access.redhat.com/errata/RHSA-2026:33531","https://access.redhat.com/errata/RHSA-2026:34342","https://access.redhat.com/errata/RHSA-2026:34357","https://access.redhat.com/errata/RHSA-2026:34359","https://access.redhat.com/errata/RHSA-2026:34364","https://access.redhat.com/errata/RHSA-2026:34789","https://access.redhat.com/errata/RHSA-2026:35826","https://access.redhat.com/errata/RHSA-2026:35827","https://access.redhat.com/errata/RHSA-2026:35828","https://access.redhat.com/errata/RHSA-2026:35829","https://access.redhat.com/errata/RHSA-2026:35830","https://access.redhat.com/errata/RHSA-2026:35831","https://access.redhat.com/errata/RHSA-2026:35993","https://access.redhat.com/errata/RHSA-2026:35994","https://access.redhat.com/errata/RHSA-2026:36105","https://access.redhat.com/errata/RHSA-2026:36167","https://access.redhat.com/errata/RHSA-2026:36207","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:36808","https://access.redhat.com/errata/RHSA-2026:36820","https://access.redhat.com/errata/RHSA-2026:36883","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:37435","https://access.redhat.com/errata/RHSA-2026:37436","https://access.redhat.com/errata/RHSA-2026:38995","https://access.redhat.com/errata/RHSA-2026:39005","https://access.redhat.com/errata/RHSA-2026:39573","https://access.redhat.com/errata/RHSA-2026:39879","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41030","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:41036","https://access.redhat.com/errata/RHSA-2026:41055","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:41930","https://access.redhat.com/errata/RHSA-2026:42043","https://access.redhat.com/errata/RHSA-2026:42047","https://access.redhat.com/errata/RHSA-2026:42048","https://access.redhat.com/errata/RHSA-2026:42049","https://access.redhat.com/errata/RHSA-2026:42050","https://access.redhat.com/errata/RHSA-2026:42051","https://access.redhat.com/errata/RHSA-2026:42078","https://access.redhat.com/errata/RHSA-2026:42079","https://access.redhat.com/errata/RHSA-2026:42080","https://access.redhat.com/errata/RHSA-2026:42082","https://access.redhat.com/errata/RHSA-2026:42132","https://access.redhat.com/errata/RHSA-2026:42142","https://access.redhat.com/errata/RHSA-2026:42146","https://access.redhat.com/errata/RHSA-2026:42150","https://access.redhat.com/errata/RHSA-2026:42151","https://access.redhat.com/errata/RHSA-2026:42240","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:42852","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:43052","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:44622","https://access.redhat.com/errata/RHSA-2026:44624","https://access.redhat.com/errata/RHSA-2026:46395","https://access.redhat.com/errata/RHSA-2026:47149","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:47737","https://access.redhat.com/errata/RHSA-2026:47952","https://access.redhat.com/errata/RHSA-2026:49702","https://access.redhat.com/errata/RHSA-2026:49712","https://access.redhat.com/errata/RHSA-2026:50300","https://access.redhat.com/errata/RHSA-2026:50843","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:51112","https://access.redhat.com/errata/RHSA-2026:51187","https://access.redhat.com/errata/RHSA-2026:51194","https://access.redhat.com/errata/RHSA-2026:51341","https://access.redhat.com/errata/RHSA-2026:52826","https://access.redhat.com/errata/RHSA-2026:53374","https://access.redhat.com/errata/RHSA-2026:53412","https://access.redhat.com/errata/RHSA-2026:53413","https://access.redhat.com/errata/RHSA-2026:53415","https://access.redhat.com/errata/RHSA-2026:53530","https://access.redhat.com/errata/RHSA-2026:54191","https://access.redhat.com/errata/RHSA-2026:54274","https://access.redhat.com/errata/RHSA-2026:54283","https://access.redhat.com/errata/RHSA-2026:54284","https://access.redhat.com/errata/RHSA-2026:54285","https://access.redhat.com/errata/RHSA-2026:54286","https://access.redhat.com/errata/RHSA-2026:54287","https://access.redhat.com/errata/RHSA-2026:54395","https://access.redhat.com/errata/RHSA-2026:54401","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54441","https://access.redhat.com/errata/RHSA-2026:54531","https://access.redhat.com/errata/RHSA-2026:54580","https://access.redhat.com/errata/RHSA-2026:54757","https://access.redhat.com/errata/RHSA-2026:56143","https://access.redhat.com/errata/RHSA-2026:56223","https://access.redhat.com/errata/RHSA-2026:56340","https://access.redhat.com/errata/RHSA-2026:56431","https://access.redhat.com/errata/RHSA-2026:57194","https://access.redhat.com/errata/RHSA-2026:57541","https://access.redhat.com/errata/RHSA-2026:57649","https://access.redhat.com/errata/RHSA-2026:57845","https://access.redhat.com/errata/RHSA-2026:59546","https://access.redhat.com/errata/RHSA-2026:59549","https://access.redhat.com/errata/RHSA-2026:59562","https://access.redhat.com/errata/RHSA-2026:60315","https://access.redhat.com/errata/RHSA-2026:60354","https://access.redhat.com/errata/RHSA-2026:60387","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61245","https://access.redhat.com/errata/RHSA-2026:61253","https://access.redhat.com/errata/RHSA-2026:62549","https://access.redhat.com/errata/RHSA-2026:63134","https://access.redhat.com/errata/RHSA-2026:65126","https://access.redhat.com/errata/RHSA-2026:65153","https://access.redhat.com/errata/RHSA-2026:65359","https://access.redhat.com/errata/RHSA-2026:65534","https://access.redhat.com/errata/RHSA-2026:65851","https://access.redhat.com/errata/RHSA-2026:65886","https://access.redhat.com/errata/RHSA-2026:66016","https://access.redhat.com/errata/RHSA-2026:66022","https://access.redhat.com/errata/RHSA-2026:66350","https://access.redhat.com/errata/RHSA-2026:66432","https://access.redhat.com/errata/RHSA-2026:67149","https://access.redhat.com/errata/RHSA-2026:67159","https://access.redhat.com/errata/RHSA-2026:67160","https://access.redhat.com/errata/RHSA-2026:67287","https://access.redhat.com/errata/RHSA-2026:67319","https://access.redhat.com/errata/RHSA-2026:67517","https://access.redhat.com/errata/RHSA-2026:68504","https://access.redhat.com/security/cve/CVE-2026-39821","https://bugzilla.redhat.com/show_bug.cgi?id=2480756","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-39821","description":"The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\"."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.25.13"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-5026","versionConstraint":"<1.25.13||>=1.26.0-0,<1.26.6||>=1.27.0-0,<1.27.0-rc.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-5026","fix":{"state":"fixed","versions":["1.25.13","1.26.6","1.27.0-rc.3"],"available":[{"date":"2026-08-13","kind":"release","version":"1.25.13"},{"date":"2026-08-13","kind":"release","version":"1.26.6"},{"date":"2026-08-13","kind":"release","version":"1.27.0-rc.3"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","metrics":{"baseScore":8.2,"impactScore":5.8,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39821","cwe":"CWE-1289","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-39821","cwe":"CWE-1289","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39821","date":"2026-10-08","epss":0.00692,"percentile":0.51378}],"risk":0.5432199999999999,"urls":["https://go.dev/issue/78760","https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8","https://groups.google.com/g/golang-announce/c/94pEornpRlI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/767220","description":"The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error.\n\nThis behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\"."},"relatedVulnerabilities":[{"id":"CVE-2026-39821","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","metrics":{"baseScore":8.2,"impactScore":5.8,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","metrics":{"baseScore":9.6,"impactScore":5.8,"exploitabilityScore":3.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39821","cwe":"CWE-1289","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-39821","cwe":"CWE-1289","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39821","date":"2026-10-08","epss":0.00692,"percentile":0.51378}],"urls":["https://go.dev/cl/767220","https://go.dev/issue/78760","https://groups.google.com/g/golang-announce/c/94pEornpRlI","https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8","https://pkg.go.dev/vuln/GO-2026-5026","https://access.redhat.com/errata/RHSA-2026:23262","https://access.redhat.com/errata/RHSA-2026:23264","https://access.redhat.com/errata/RHSA-2026:26546","https://access.redhat.com/errata/RHSA-2026:26547","https://access.redhat.com/errata/RHSA-2026:30650","https://access.redhat.com/errata/RHSA-2026:30651","https://access.redhat.com/errata/RHSA-2026:30853","https://access.redhat.com/errata/RHSA-2026:30854","https://access.redhat.com/errata/RHSA-2026:30855","https://access.redhat.com/errata/RHSA-2026:33155","https://access.redhat.com/errata/RHSA-2026:33160","https://access.redhat.com/errata/RHSA-2026:33163","https://access.redhat.com/errata/RHSA-2026:33173","https://access.redhat.com/errata/RHSA-2026:33183","https://access.redhat.com/errata/RHSA-2026:33524","https://access.redhat.com/errata/RHSA-2026:33531","https://access.redhat.com/errata/RHSA-2026:34342","https://access.redhat.com/errata/RHSA-2026:34357","https://access.redhat.com/errata/RHSA-2026:34359","https://access.redhat.com/errata/RHSA-2026:34364","https://access.redhat.com/errata/RHSA-2026:34789","https://access.redhat.com/errata/RHSA-2026:35826","https://access.redhat.com/errata/RHSA-2026:35827","https://access.redhat.com/errata/RHSA-2026:35828","https://access.redhat.com/errata/RHSA-2026:35829","https://access.redhat.com/errata/RHSA-2026:35830","https://access.redhat.com/errata/RHSA-2026:35831","https://access.redhat.com/errata/RHSA-2026:35993","https://access.redhat.com/errata/RHSA-2026:35994","https://access.redhat.com/errata/RHSA-2026:36105","https://access.redhat.com/errata/RHSA-2026:36167","https://access.redhat.com/errata/RHSA-2026:36207","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:36808","https://access.redhat.com/errata/RHSA-2026:36820","https://access.redhat.com/errata/RHSA-2026:36883","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:37435","https://access.redhat.com/errata/RHSA-2026:37436","https://access.redhat.com/errata/RHSA-2026:38995","https://access.redhat.com/errata/RHSA-2026:39005","https://access.redhat.com/errata/RHSA-2026:39573","https://access.redhat.com/errata/RHSA-2026:39879","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41030","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:41036","https://access.redhat.com/errata/RHSA-2026:41055","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:41930","https://access.redhat.com/errata/RHSA-2026:42043","https://access.redhat.com/errata/RHSA-2026:42047","https://access.redhat.com/errata/RHSA-2026:42048","https://access.redhat.com/errata/RHSA-2026:42049","https://access.redhat.com/errata/RHSA-2026:42050","https://access.redhat.com/errata/RHSA-2026:42051","https://access.redhat.com/errata/RHSA-2026:42078","https://access.redhat.com/errata/RHSA-2026:42079","https://access.redhat.com/errata/RHSA-2026:42080","https://access.redhat.com/errata/RHSA-2026:42082","https://access.redhat.com/errata/RHSA-2026:42132","https://access.redhat.com/errata/RHSA-2026:42142","https://access.redhat.com/errata/RHSA-2026:42146","https://access.redhat.com/errata/RHSA-2026:42150","https://access.redhat.com/errata/RHSA-2026:42151","https://access.redhat.com/errata/RHSA-2026:42240","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:42852","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:43052","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:44622","https://access.redhat.com/errata/RHSA-2026:44624","https://access.redhat.com/errata/RHSA-2026:46395","https://access.redhat.com/errata/RHSA-2026:47149","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:47737","https://access.redhat.com/errata/RHSA-2026:47952","https://access.redhat.com/errata/RHSA-2026:49702","https://access.redhat.com/errata/RHSA-2026:49712","https://access.redhat.com/errata/RHSA-2026:50300","https://access.redhat.com/errata/RHSA-2026:50843","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:51112","https://access.redhat.com/errata/RHSA-2026:51187","https://access.redhat.com/errata/RHSA-2026:51194","https://access.redhat.com/errata/RHSA-2026:51341","https://access.redhat.com/errata/RHSA-2026:52826","https://access.redhat.com/errata/RHSA-2026:53374","https://access.redhat.com/errata/RHSA-2026:53412","https://access.redhat.com/errata/RHSA-2026:53413","https://access.redhat.com/errata/RHSA-2026:53415","https://access.redhat.com/errata/RHSA-2026:53530","https://access.redhat.com/errata/RHSA-2026:54191","https://access.redhat.com/errata/RHSA-2026:54274","https://access.redhat.com/errata/RHSA-2026:54283","https://access.redhat.com/errata/RHSA-2026:54284","https://access.redhat.com/errata/RHSA-2026:54285","https://access.redhat.com/errata/RHSA-2026:54286","https://access.redhat.com/errata/RHSA-2026:54287","https://access.redhat.com/errata/RHSA-2026:54395","https://access.redhat.com/errata/RHSA-2026:54401","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54441","https://access.redhat.com/errata/RHSA-2026:54531","https://access.redhat.com/errata/RHSA-2026:54580","https://access.redhat.com/errata/RHSA-2026:54757","https://access.redhat.com/errata/RHSA-2026:56143","https://access.redhat.com/errata/RHSA-2026:56223","https://access.redhat.com/errata/RHSA-2026:56340","https://access.redhat.com/errata/RHSA-2026:56431","https://access.redhat.com/errata/RHSA-2026:57194","https://access.redhat.com/errata/RHSA-2026:57541","https://access.redhat.com/errata/RHSA-2026:57649","https://access.redhat.com/errata/RHSA-2026:57845","https://access.redhat.com/errata/RHSA-2026:59546","https://access.redhat.com/errata/RHSA-2026:59549","https://access.redhat.com/errata/RHSA-2026:59562","https://access.redhat.com/errata/RHSA-2026:60315","https://access.redhat.com/errata/RHSA-2026:60354","https://access.redhat.com/errata/RHSA-2026:60387","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61245","https://access.redhat.com/errata/RHSA-2026:61253","https://access.redhat.com/errata/RHSA-2026:62549","https://access.redhat.com/errata/RHSA-2026:63134","https://access.redhat.com/errata/RHSA-2026:65126","https://access.redhat.com/errata/RHSA-2026:65153","https://access.redhat.com/errata/RHSA-2026:65359","https://access.redhat.com/errata/RHSA-2026:65534","https://access.redhat.com/errata/RHSA-2026:65851","https://access.redhat.com/errata/RHSA-2026:65886","https://access.redhat.com/errata/RHSA-2026:66016","https://access.redhat.com/errata/RHSA-2026:66022","https://access.redhat.com/errata/RHSA-2026:66350","https://access.redhat.com/errata/RHSA-2026:66432","https://access.redhat.com/errata/RHSA-2026:67149","https://access.redhat.com/errata/RHSA-2026:67159","https://access.redhat.com/errata/RHSA-2026:67160","https://access.redhat.com/errata/RHSA-2026:67287","https://access.redhat.com/errata/RHSA-2026:67319","https://access.redhat.com/errata/RHSA-2026:67517","https://access.redhat.com/errata/RHSA-2026:68504","https://access.redhat.com/security/cve/CVE-2026-39821","https://bugzilla.redhat.com/show_bug.cgi?id=2480756","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-39821","description":"The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\"."}]},{"artifact":{"id":"8f15488d1d4f1c9b","cpes":["cpe:2.3:a:jenkins:html_publisher:1.31:*:*:*:*:jenkins:*:*"],"name":"htmlpublisher","purl":"pkg:maven/org.jenkins-ci.plugins/htmlpublisher@1.31","type":"jenkins-plugin","version":"1.31","language":"java","licenses":["The MIT License (MIT)"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/ref/plugins/htmlpublisher.jpi:WEB-INF/lib/htmlpublisher.jar","manifestName":"","pomArtifactID":"htmlpublisher","archiveDigests":[{"value":"19f4f84beb29758d117e06d31eb7da6abac9f168","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/htmlpublisher.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/htmlpublisher.jpi:WEB-INF/lib/htmlpublisher.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.32.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-xrrw-9j78-hpf3","versionConstraint":"<1.32.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:htmlpublisher","version":"1.31"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-xrrw-9j78-hpf3","fix":{"state":"fixed","versions":["1.32.1"],"available":[{"date":"2024-03-08","kind":"first-observed","version":"1.32.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28150","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28150","date":"2026-10-08","epss":0.00681,"percentile":0.50944}],"risk":0.527775,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-28150","https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3302","https://github.com/jenkinsci/htmlpublisher-plugin/commit/c0eed940e65ea90f9b5ba21aa3d953546d5cd8ad","http://www.openwall.com/lists/oss-security/2024/03/06/3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-xrrw-9j78-hpf3","description":"Jenkins HTML Publisher Plugin Stored XSS vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-28150","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","metrics":{"baseScore":4.7,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28150","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28150","date":"2026-10-08","epss":0.00681,"percentile":0.50944}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/06/3","https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3302"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28150","description":"Jenkins HTML Publisher Plugin 1.32 and earlier does not escape job names, report names, and index page titles shown as part of the report frame, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission."}]},{"artifact":{"id":"442d6a68f2c7f21a","cpes":["cpe:2.3:a:jenkins:html_publisher:1.31:*:*:*:*:jenkins:*:*"],"name":"htmlpublisher","purl":"pkg:maven/org.jenkins-ci.plugins/htmlpublisher@1.31","type":"jenkins-plugin","version":"1.31","language":"java","licenses":["The MIT License (MIT)"],"metadata":{"pomGroupID":"org.jenkins-ci.plugins","virtualPath":"/usr/share/jenkins/ref/plugins/htmlpublisher.jpi","manifestName":"","pomArtifactID":"htmlpublisher","archiveDigests":[{"value":"f5ec5effe328aa732b6cc86a72f1a735cd52db15","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/htmlpublisher.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/htmlpublisher.jpi","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.32.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-xrrw-9j78-hpf3","versionConstraint":"<1.32.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jenkins-ci.plugins:htmlpublisher","version":"1.31"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-xrrw-9j78-hpf3","fix":{"state":"fixed","versions":["1.32.1"],"available":[{"date":"2024-03-08","kind":"first-observed","version":"1.32.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28150","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28150","date":"2026-10-08","epss":0.00681,"percentile":0.50944}],"risk":0.527775,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-28150","https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3302","https://github.com/jenkinsci/htmlpublisher-plugin/commit/c0eed940e65ea90f9b5ba21aa3d953546d5cd8ad","http://www.openwall.com/lists/oss-security/2024/03/06/3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-xrrw-9j78-hpf3","description":"Jenkins HTML Publisher Plugin Stored XSS vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-28150","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","metrics":{"baseScore":4.7,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28150","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28150","date":"2026-10-08","epss":0.00681,"percentile":0.50944}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/06/3","https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3302"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28150","description":"Jenkins HTML Publisher Plugin 1.32 and earlier does not escape job names, report names, and index page titles shown as part of the report frame, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.31"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-22016","versionConstraint":"< 1.8.0_492||>= 1.9, < 8.0.492||>= 12, < 17.0.19||>= 18, < 21.0.11||>= 22, < 25.0.3||>= 26, < 26.0.1||>= 9, < 11.0.31 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-22016","fix":{"state":"fixed","versions":["1.8.0_492","8.0.492","11.0.31","17.0.19","21.0.11","25.0.3","26.0.1"],"available":[{"date":"2026-04-24","kind":"first-observed","version":"1.8.0_492"},{"date":"2026-04-24","kind":"first-observed","version":"8.0.492"},{"date":"2026-04-24","kind":"first-observed","version":"17.0.19"},{"date":"2026-04-24","kind":"first-observed","version":"21.0.11"},{"date":"2026-04-24","kind":"first-observed","version":"25.0.3"},{"date":"2026-04-24","kind":"first-observed","version":"26.0.1"},{"date":"2026-04-24","kind":"first-observed","version":"11.0.31"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-22016","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-22016","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-22016","cwe":"CWE-611","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-22016","date":"2026-10-08","epss":0.00702,"percentile":0.51804}],"risk":0.5265000000000001,"urls":["https://www.oracle.com/security-alerts/cpuapr2026.html","https://access.redhat.com/errata/RHSA-2026:11403","https://access.redhat.com/errata/RHSA-2026:11655","https://access.redhat.com/errata/RHSA-2026:11822","https://access.redhat.com/errata/RHSA-2026:11829","https://access.redhat.com/errata/RHSA-2026:11902","https://access.redhat.com/errata/RHSA-2026:22139","https://access.redhat.com/errata/RHSA-2026:22328","https://access.redhat.com/errata/RHSA-2026:9254","https://access.redhat.com/errata/RHSA-2026:9682","https://access.redhat.com/errata/RHSA-2026:9683","https://access.redhat.com/errata/RHSA-2026:9684","https://access.redhat.com/errata/RHSA-2026:9686","https://access.redhat.com/errata/RHSA-2026:9687","https://access.redhat.com/errata/RHSA-2026:9688","https://access.redhat.com/errata/RHSA-2026:9689","https://access.redhat.com/errata/RHSA-2026:9691","https://access.redhat.com/errata/RHSA-2026:9693","https://access.redhat.com/errata/RHSA-2026:9694","https://access.redhat.com/security/cve/CVE-2026-22016","https://bugzilla.redhat.com/show_bug.cgi?id=2460039","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22016.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-22016","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.29"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-53066","versionConstraint":"< 1.8.0_472||>= 1.9, < 8.0.472||>= 12, < 17.0.17||>= 18, < 21.0.9||>= 22, < 25.0.1||>= 9, < 11.0.29 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-53066","fix":{"state":"fixed","versions":["1.8.0_472","8.0.472","11.0.29","17.0.17","21.0.9","25.0.1"],"available":[{"date":"2025-10-23","kind":"first-observed","version":"1.8.0_472"},{"date":"2025-10-23","kind":"first-observed","version":"8.0.472"},{"date":"2025-10-23","kind":"first-observed","version":"17.0.17"},{"date":"2025-10-23","kind":"first-observed","version":"21.0.9"},{"date":"2025-10-23","kind":"first-observed","version":"25.0.1"},{"date":"2025-10-23","kind":"first-observed","version":"11.0.29"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-53066","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-53066","date":"2026-10-08","epss":0.00694,"percentile":0.51454}],"risk":0.5205,"urls":["https://www.oracle.com/security-alerts/cpuoct2025.html","https://lists.debian.org/debian-lts-announce/2025/10/msg00026.html","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-53066","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and  21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.20.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-2041","versionConstraint":"<1.20.8||>=1.21.0-0,<1.21.1 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-2041","fix":{"state":"fixed","versions":["1.20.8","1.21.1"],"available":[{"date":"2023-09-06","kind":"release","version":"1.20.8"},{"date":"2023-09-06","kind":"release","version":"1.21.1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39318","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-39318","date":"2026-10-08","epss":0.0093,"percentile":0.59397}],"risk":0.5161499999999999,"urls":["https://go.dev/cl/526156","https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/62196","description":"The html/template package does not properly handle HTML-like \"\" comment tokens, nor hashbang \"#!\" comment tokens, in <script> contexts. This may cause the template parser to improperly interpret the contents of <script> contexts, causing actions to be improperly escaped. This may be leveraged to perform an XSS attack."},"relatedVulnerabilities":[{"id":"CVE-2023-39318","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39318","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-39318","date":"2026-10-08","epss":0.0093,"percentile":0.59397}],"urls":["https://go.dev/cl/526156","https://go.dev/issue/62196","https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ","https://pkg.go.dev/vuln/GO-2023-2041","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20231020-0009/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39318","description":"The html/template package does not properly handle HTML-like \"\" comment tokens, nor hashbang \"#!\" comment tokens, in <script> contexts. This may cause the template parser to improperly interpret the contents of <script> contexts, causing actions to be improperly escaped. This may be leveraged to perform an XSS attack."}]},{"artifact":{"id":"10fc6b46fb6dd300","cpes":["cpe:2.3:a:org.eclipse.jetty:jetty-security:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty_security:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-security:jetty-security:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-security:jetty_security:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_security:jetty-security:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_security:jetty_security:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty-security:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty_security:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-security:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty-security:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty_security:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_security:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty:10.0.15:*:*:*:*:*:*:*"],"name":"jetty-security","purl":"pkg:maven/org.eclipse.jetty/jetty-security@10.0.15","type":"java-archive","version":"10.0.15","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jetty","virtualPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar:org.eclipse.jetty:jetty-security","manifestName":"","pomArtifactID":"jetty-security","archiveDigests":null},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"10.0.31"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2fvj-hgj9-j2gr","versionConstraint":">=10.0.0,<=10.0.26 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jetty:jetty-security","version":"10.0.15"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-2fvj-hgj9-j2gr","fix":{"state":"fixed","versions":["10.0.31"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"10.0.31"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-10050","cwe":"CWE-173","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2026-10050","cwe":"CWE-303","type":"Secondary","source":"emo@eclipse.org"}],"epss":[{"cve":"CVE-2026-10050","date":"2026-10-08","epss":0.00632,"percentile":0.48697}],"risk":0.51192,"urls":["https://github.com/jetty/jetty.project/security/advisories/GHSA-2fvj-hgj9-j2gr","https://github.com/jetty/jetty.project/issues/15136","https://github.com/jetty/jetty.project/pull/15160","https://github.com/jetty/jetty.project/pull/15183","https://github.com/jetty/jetty.project/commit/4bcdbc7db387ce9e20e2c7571a7250280466221d","https://github.com/jetty/jetty.project/commit/d0bb829ccecbf19e3ad3d32f2649b2800f01222d","https://github.com/jetty/jetty.project/releases/tag/jetty-12.0.36","https://github.com/jetty/jetty.project/releases/tag/jetty-12.1.10"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2fvj-hgj9-j2gr","description":"Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution"},"relatedVulnerabilities":[{"id":"CVE-2026-10050","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-10050","cwe":"CWE-173","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2026-10050","cwe":"CWE-303","type":"Secondary","source":"emo@eclipse.org"}],"epss":[{"cve":"CVE-2026-10050","date":"2026-10-08","epss":0.00632,"percentile":0.48697}],"urls":["https://github.com/jetty/jetty.project/security/advisories/GHSA-2fvj-hgj9-j2gr","https://gitlab.eclipse.org/security/cve-assignment/-/work_items/120"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-10050","description":"In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes.\n\n\n\nThis was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons.\n\n\n\nIf the password contains characters that cannot be represented in ISO-8859-1, they are silently replaced by `?`. This happens with passwords that contain Chinese, Cyrillic or Greek characters, for example: `αβ123` converts to `??123`.\n\n\n\nAn attacker can send a request with a digest `Authorization` header crafted with a password made of only `?` characters; the server would match any password of the same length that contains non-ISO-8859-1 characters.\n\n\n\nRecent HTTP Digest [RFC-7616](https://datatracker.ietf.org/doc/html/rfc7616) supports a `charset` parameters that defaults to UTF-8 that allows for correct encoding/decoding of passwords."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.20.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-2043","versionConstraint":"<1.20.8||>=1.21.0-0,<1.21.1 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-2043","fix":{"state":"fixed","versions":["1.20.8","1.21.1"],"available":[{"date":"2023-09-06","kind":"release","version":"1.20.8"},{"date":"2023-09-06","kind":"release","version":"1.21.1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39319","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-39319","date":"2026-10-08","epss":0.00911,"percentile":0.58777}],"risk":0.505605,"urls":["https://go.dev/cl/526157","https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/62197","description":"The html/template package does not apply the proper rules for handling occurrences of \"<script\", \"<!--\", and \"</script\" within JS literals in <script> contexts. This may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped. This could be leveraged to perform an XSS attack."},"relatedVulnerabilities":[{"id":"CVE-2023-39319","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39319","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-39319","date":"2026-10-08","epss":0.00911,"percentile":0.58777}],"urls":["https://go.dev/cl/526157","https://go.dev/issue/62197","https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ","https://pkg.go.dev/vuln/GO-2023-2043","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20231020-0009/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39319","description":"The html/template package does not apply the proper rules for handling occurrences of \"<script\", \"<!--\", and \"</script\" within JS literals in <script> contexts. This may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped. This could be leveraged to perform an XSS attack."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.21.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2024-2600","versionConstraint":"<1.21.8||>=1.22.0-0,<1.22.1 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2024-2600","fix":{"state":"fixed","versions":["1.21.8","1.22.1"],"available":[{"date":"2024-03-05","kind":"release","version":"1.21.8"},{"date":"2024-03-05","kind":"release","version":"1.22.1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-45289","date":"2026-10-08","epss":0.0108,"percentile":0.64084}],"risk":0.5022,"urls":["https://go.dev/cl/569340","https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/65065","description":"When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as \"Authorization\" or \"Cookie\". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a redirect to bar.com will not.\n\nA maliciously crafted HTTP redirect could cause sensitive headers to be unexpectedly forwarded."},"relatedVulnerabilities":[{"id":"CVE-2023-45289","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-45289","date":"2026-10-08","epss":0.0108,"percentile":0.64084}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/08/4","https://go.dev/cl/569340","https://go.dev/issue/65065","https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg","https://pkg.go.dev/vuln/GO-2024-2600","https://security.netapp.com/advisory/ntap-20240329-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-45289","description":"When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as \"Authorization\" or \"Cookie\". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a redirect to bar.com will not. A maliciously crafted HTTP redirect could cause sensitive headers to be unexpectedly forwarded."}]},{"artifact":{"id":"d24cead2215196ba","cpes":["cpe:2.3:a:org.bitbucket.b_c.jose4j:jose4j:0.9.3:*:*:*:*:*:*:*","cpe:2.3:a:org.bitbucket.b_c:jose4j:0.9.3:*:*:*:*:*:*:*","cpe:2.3:a:bitbucket:jose4j:0.9.3:*:*:*:*:*:*:*","cpe:2.3:a:jose4j:jose4j:0.9.3:*:*:*:*:*:*:*","cpe:2.3:a:b-c:jose4j:0.9.3:*:*:*:*:*:*:*","cpe:2.3:a:b_c:jose4j:0.9.3:*:*:*:*:*:*:*","cpe:2.3:a:b:jose4j:0.9.3:*:*:*:*:*:*:*"],"name":"jose4j","purl":"pkg:maven/org.bitbucket.b_c/jose4j@0.9.3","type":"java-archive","version":"0.9.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.bitbucket.b_c","virtualPath":"/usr/share/jenkins/ref/plugins/blueocean-jwt.jpi:WEB-INF/lib/jose4j-0.9.3.jar","manifestName":"","pomArtifactID":"jose4j","archiveDigests":[{"value":"9670e11587194cb6b1b2edcaa688a3fab85b4148","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/blueocean-jwt.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/blueocean-jwt.jpi:WEB-INF/lib/jose4j-0.9.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.9.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6qvw-249j-h44c","versionConstraint":"<0.9.4 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bitbucket.b_c:jose4j","version":"0.9.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-6qvw-249j-h44c","fix":{"state":"fixed","versions":["0.9.4"],"available":[{"date":"2024-03-01","kind":"first-observed","version":"0.9.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-51775","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-51775","date":"2026-10-08","epss":0.00871,"percentile":0.57591}],"risk":0.500825,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-51775","https://bitbucket.org/b_c/jose4j/issues/212","https://bitbucket.org/b_c/jose4j/commits/1afaa1e174b3","https://security.netapp.com/advisory/ntap-20241108-0002"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6qvw-249j-h44c","description":"jose4j denial of service via specifically crafted JWE"},"relatedVulnerabilities":[{"id":"CVE-2023-51775","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-51775","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-51775","date":"2026-10-08","epss":0.00871,"percentile":0.57591}],"urls":["https://bitbucket.org/b_c/jose4j/issues/212","https://security.netapp.com/advisory/ntap-20241108-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-51775","description":"The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-8194","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.6||>= 3.14.0a1, < 3.14.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.14"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-8194","versionConstraint":"< 3.9.24||>= 3.10.0, < 3.10.19||>= 3.11.0, < 3.11.14||>= 3.12.0, < 3.12.12||>= 3.13.0, < 3.13.6||>= 3.14.0a1, < 3.14.0rc2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-8194","fix":{"state":"fixed","versions":["3.9.24","3.10.19","3.11.14","3.12.12","3.13.6","3.14.0rc2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.9.24"},{"date":"2026-09-22","kind":"first-observed","version":"3.10.19"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.12"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.0rc2"},{"date":"2025-10-10","kind":"first-observed","version":"3.9.24"},{"date":"2025-10-10","kind":"first-observed","version":"3.10.19"},{"date":"2025-10-10","kind":"first-observed","version":"3.11.14"},{"date":"2025-10-10","kind":"first-observed","version":"3.12.12"},{"date":"2025-09-04","kind":"first-observed","version":"3.13.6"},{"date":"2025-09-04","kind":"first-observed","version":"3.14.0rc2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-8194","cwe":"CWE-835","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-8194","date":"2026-10-08","epss":0.00667,"percentile":0.50352}],"risk":0.50025,"urls":["https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1","https://github.com/python/cpython/commit/57f5981d6260ed21266e0c26951b8564cc252bc2","https://github.com/python/cpython/commit/7040aa54f14676938970e10c5f74ea93cd56aa38","https://github.com/python/cpython/commit/73f03e4808206f71eb6b92c579505a220942ef19","https://github.com/python/cpython/commit/b4ec17488eedec36d3c05fec127df71c0071f6cb","https://github.com/python/cpython/commit/c9d9f78feb1467e73fd29356c040bde1c104f29f","https://github.com/python/cpython/commit/cdae923ffe187d6ef916c0f665a31249619193fe","https://github.com/python/cpython/commit/fbc2a0ca9ac8aff6887f8ddf79b87b4510277227","https://github.com/python/cpython/issues/130577","https://github.com/python/cpython/pull/137027","https://mail.python.org/archives/list/security-announce@python.org/thread/ZULLF3IZ726XP5EY7XJ7YIN3K5MDYR2D/","http://www.openwall.com/lists/oss-security/2025/07/28/1","http://www.openwall.com/lists/oss-security/2025/07/28/2","https://github.com/python/cpython/pull/57f5981d6260ed21266e0c26951b8564cc252bc2","https://github.com/python/cpython/pull/73f03e4808206f71eb6b92c579505a220942ef19","https://github.com/python/cpython/pull/b4ec17488eedec36d3c05fec127df71c0071f6cb","https://github.com/python/cpython/pull/c9d9f78feb1467e73fd29356c040bde1c104f29f","https://github.com/python/cpython/pull/cdae923ffe187d6ef916c0f665a31249619193fe","https://github.com/python/cpython/pull/fbc2a0ca9ac8aff6887f8ddf79b87b4510277227"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-8194","description":"There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error, resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. \n\nThis vulnerability can be mitigated by including the following patch after importing the “tarfile” module:  https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1"},"relatedVulnerabilities":[]},{"artifact":{"id":"16161e710f1e18cd","cpes":["cpe:2.3:a:apache:commons-compress:1.23.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_compress:1.23.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:compress:1.23.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:1.23.0:*:*:*:*:*:*:*"],"name":"commons-compress","purl":"pkg:maven/org.apache.commons/commons-compress@1.23.0","type":"java-archive","version":"1.23.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.commons","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-compress-1.23.0.jar","manifestName":"","pomArtifactID":"commons-compress","archiveDigests":[{"value":"4af2060ea9b0c8b74f1854c6cafe4d43cfc161fc","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/lib/commons-compress-1.23.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4265-ccf5-phj5","versionConstraint":">=1.21,<1.26.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.commons:commons-compress","version":"1.23.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4265-ccf5-phj5","fix":{"state":"fixed","versions":["1.26.0"],"available":[{"date":"2024-02-21","kind":"first-observed","version":"1.26.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":6.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26308","cwe":"CWE-770","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-26308","date":"2026-10-08","epss":0.00898,"percentile":0.58365}],"risk":0.49838999999999994,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-26308","https://lists.apache.org/thread/ch5yo2d21p7vlqrhll9b17otbyq4npfg","http://www.openwall.com/lists/oss-security/2024/02/19/2","https://security.netapp.com/advisory/ntap-20240307-0009"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4265-ccf5-phj5","description":"Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file"},"relatedVulnerabilities":[{"id":"CVE-2024-26308","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26308","cwe":"CWE-770","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-26308","date":"2026-10-08","epss":0.00898,"percentile":0.58365}],"urls":["http://www.openwall.com/lists/oss-security/2024/02/19/2","https://lists.apache.org/thread/ch5yo2d21p7vlqrhll9b17otbyq4npfg","https://security.netapp.com/advisory/ntap-20240307-0009/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26308","description":"Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.\n\nUsers are recommended to upgrade to version 1.26, which fixes the issue."}]},{"artifact":{"id":"b15f17cdf96ba713","cpes":["cpe:2.3:a:org.codehaus.plexus:plexus-utils:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:org.codehaus.plexus:plexus_utils:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:org.codehaus.plexus:plexus:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:plexus-utils:plexus-utils:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:plexus-utils:plexus_utils:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:plexus_utils:plexus-utils:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:plexus_utils:plexus_utils:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:codehaus:plexus-utils:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:codehaus:plexus_utils:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:plexus-utils:plexus:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:plexus:plexus-utils:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:plexus:plexus_utils:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:plexus_utils:plexus:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:codehaus:plexus:3.5.1:*:*:*:*:*:*:*","cpe:2.3:a:plexus:plexus:3.5.1:*:*:*:*:*:*:*"],"name":"plexus-utils","purl":"pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1","type":"java-archive","version":"3.5.1","language":"java","licenses":["Apache-2.0"],"metadata":{"pomGroupID":"org.codehaus.plexus","virtualPath":"/usr/share/jenkins/ref/plugins/jira.jpi:WEB-INF/lib/plexus-utils-3.5.1.jar","manifestName":"","pomArtifactID":"plexus-utils","archiveDigests":[{"value":"c6bfb17c97ecc8863e88778ea301be742c62b06d","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/jira.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/jira.jpi:WEB-INF/lib/plexus-utils-3.5.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.6.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6fmv-xxpf-w3cw","versionConstraint":"<3.6.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.codehaus.plexus:plexus-utils","version":"3.5.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-6fmv-xxpf-w3cw","fix":{"state":"fixed","versions":["3.6.1"],"available":[{"date":"2026-04-09","kind":"first-observed","version":"3.6.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-67030","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2025-67030","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2025-67030","date":"2026-10-08","epss":0.00663,"percentile":0.50153}],"risk":0.49724999999999997,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-67030","https://github.com/codehaus-plexus/plexus-utils/issues/294","https://github.com/codehaus-plexus/plexus-utils/pull/295","https://github.com/codehaus-plexus/plexus-utils/pull/296","https://github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29547e0012d5b29642","https://gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec","https://github.com/codehaus-plexus/plexus-utils/releases/tag/plexus-utils-4.0.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6fmv-xxpf-w3cw","description":"Plexus-Utils has a Directory Traversal vulnerability in its extractFile method"},"relatedVulnerabilities":[{"id":"CVE-2025-67030","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","metrics":{"baseScore":8.3,"impactScore":3.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-67030","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2025-67030","cwe":"CWE-22","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2025-67030","date":"2026-10-08","epss":0.00663,"percentile":0.50153}],"urls":["https://gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec","https://github.com/codehaus-plexus/plexus-utils/commit/6d780b3378829318ba5c2d29547e0012d5b29642","https://github.com/codehaus-plexus/plexus-utils/issues/294","https://github.com/codehaus-plexus/plexus-utils/pull/295","https://github.com/codehaus-plexus/plexus-utils/pull/296","https://access.redhat.com/errata/RHSA-2026:17668","https://access.redhat.com/errata/RHSA-2026:18054","https://access.redhat.com/errata/RHSA-2026:18055","https://access.redhat.com/errata/RHSA-2026:18059","https://access.redhat.com/errata/RHSA-2026:35990","https://access.redhat.com/errata/RHSA-2026:35991","https://access.redhat.com/errata/RHSA-2026:35992","https://access.redhat.com/errata/RHSA-2026:35996","https://access.redhat.com/errata/RHSA-2026:35997","https://access.redhat.com/errata/RHSA-2026:36012","https://access.redhat.com/errata/RHSA-2026:38500","https://access.redhat.com/errata/RHSA-2026:38514","https://access.redhat.com/errata/RHSA-2026:38796","https://access.redhat.com/errata/RHSA-2026:40841","https://access.redhat.com/errata/RHSA-2026:41948","https://access.redhat.com/errata/RHSA-2026:60239","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60259","https://access.redhat.com/errata/RHSA-2026:65126","https://access.redhat.com/errata/RHSA-2026:7109","https://access.redhat.com/errata/RHSA-2026:7380","https://access.redhat.com/security/cve/CVE-2025-67030","https://bugzilla.redhat.com/show_bug.cgi?id=2451409","https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-67030.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-67030","description":"Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code"}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-15308","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-15308","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.15||>= 3.14.0, < 3.14.7||>= 3.15.0a1, < 3.15.0b4 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-15308","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.15","3.14.7","3.15.0b4"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.15"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.7"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b4"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-08-19","kind":"first-observed","version":"3.13.15"},{"date":"2026-08-19","kind":"first-observed","version":"3.14.7"},{"date":"2026-08-19","kind":"first-observed","version":"3.15.0b4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15308","cwe":"CWE-400","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-15308","date":"2026-10-08","epss":0.00637,"percentile":0.48908}],"risk":0.49686,"urls":["https://github.com/python/cpython/commit/07efb08123ba9367a7107325adb9d5626dca1ca9","https://github.com/python/cpython/commit/1e7956f1a722df9aabc509c30f8fbdc3a2b4fdc7","https://github.com/python/cpython/commit/785df8f743800661961528970f8598edcd291c14","https://github.com/python/cpython/commit/7933f4bf7131aa4140750f9404f5de0aa2969ced","https://github.com/python/cpython/commit/bcf98ddbc40ec9b3ee87da0124a5660b19b7e606","https://github.com/python/cpython/commit/c2390b9376e35a701ed3acc597b8fc87546c9b00","https://github.com/python/cpython/commit/e9f92ac0b298292e7ff998e52cb8ccacfb27a0bd","https://github.com/python/cpython/issues/153030","https://github.com/python/cpython/pull/153031","https://mail.python.org/archives/list/security-announce@python.org/thread/F6453LWKSHKCTWFLCOURWPLETNUIW2Z5/","http://www.openwall.com/lists/oss-security/2026/07/09/4"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15308","description":"The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data."},"relatedVulnerabilities":[]},{"artifact":{"id":"b2e77aa5ecffb7d4","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4046","versionConstraint":"< 2.31-13+deb11u14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-4046","fix":{"state":"fixed","versions":["2.31-13+deb11u14"],"available":[{"date":"2026-06-09","kind":"first-observed","version":"2.31-13+deb11u14"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-08","epss":0.00662,"percentile":0.50136}],"risk":0.4965,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-4046","description":"The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.    This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them."},"relatedVulnerabilities":[{"id":"CVE-2026-4046","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-08","epss":0.00662,"percentile":0.50136}],"urls":["https://inbox.sourceware.org/libc-announce/76814edf-cf7f-47ec-979d-2dce0a2c76bf@gotplt.org/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=33980","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4046","description":"The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.\n\n\n\nThis vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them."}]},{"artifact":{"id":"c2e60422a6017463","cpes":["cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4046","versionConstraint":"< 2.31-13+deb11u14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-4046","fix":{"state":"fixed","versions":["2.31-13+deb11u14"],"available":[{"date":"2026-06-09","kind":"first-observed","version":"2.31-13+deb11u14"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-08","epss":0.00662,"percentile":0.50136}],"risk":0.4965,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-4046","description":"The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.    This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them."},"relatedVulnerabilities":[{"id":"CVE-2026-4046","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-08","epss":0.00662,"percentile":0.50136}],"urls":["https://inbox.sourceware.org/libc-announce/76814edf-cf7f-47ec-979d-2dce0a2c76bf@gotplt.org/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=33980","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4046","description":"The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.\n\n\n\nThis vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.24.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2025-4009","versionConstraint":"<1.24.8||>=1.25.0,<1.25.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2025-4009","fix":{"state":"fixed","versions":["1.24.8","1.25.2"],"available":[{"date":"2025-10-07","kind":"release","version":"1.24.8"},{"date":"2025-10-07","kind":"release","version":"1.25.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-61723","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-61723","date":"2026-10-08","epss":0.00661,"percentile":0.50098}],"risk":0.49575,"urls":["https://go.dev/cl/709858","https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/75676","description":"The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input.\n\nThis affects programs which parse untrusted PEM inputs."},"relatedVulnerabilities":[{"id":"CVE-2025-61723","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-61723","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-61723","date":"2026-10-08","epss":0.00661,"percentile":0.50098}],"urls":["https://go.dev/cl/709858","https://go.dev/issue/75676","https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI","https://pkg.go.dev/vuln/GO-2025-4009","http://www.openwall.com/lists/oss-security/2025/10/08/1"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-61723","description":"The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs."}]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-23915","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-23915","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-23915","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-23915","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-23915","date":"2026-10-08","epss":0.00861,"percentile":0.57277}],"risk":0.49507499999999993,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-23915","description":"A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS."},"relatedVulnerabilities":[{"id":"CVE-2023-23915","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-23915","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-23915","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-23915","date":"2026-10-08","epss":0.00861,"percentile":0.57277}],"urls":["https://hackerone.com/reports/1826048","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230309-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-23915","description":"A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-23915","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-23915","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-23915","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-23915","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-23915","date":"2026-10-08","epss":0.00861,"percentile":0.57277}],"risk":0.49507499999999993,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-23915","description":"A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS."},"relatedVulnerabilities":[{"id":"CVE-2023-23915","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-23915","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-23915","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-23915","date":"2026-10-08","epss":0.00861,"percentile":0.57277}],"urls":["https://hackerone.com/reports/1826048","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230309-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-23915","description":"A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-23915","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-23915","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-23915","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-23915","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-23915","date":"2026-10-08","epss":0.00861,"percentile":0.57277}],"risk":0.49507499999999993,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-23915","description":"A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS."},"relatedVulnerabilities":[{"id":"CVE-2023-23915","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-23915","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2023-23915","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-23915","date":"2026-10-08","epss":0.00861,"percentile":0.57277}],"urls":["https://hackerone.com/reports/1826048","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230309-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-23915","description":"A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS."}]},{"artifact":{"id":"c3466eb679e28aa6","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A8.4p1-5%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=openssh","type":"deb","version":"1:8.4p1-5+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Beer-ware","Expat-with-advertising-restriction","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-client/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:8.4p1-5+deb11u7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-35385","versionConstraint":"< 1:8.4p1-5+deb11u7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssh","version":"1:8.4p1-5+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-35385","fix":{"state":"fixed","versions":["1:8.4p1-5+deb11u7"],"available":[{"date":"2026-05-16","kind":"first-observed","version":"1:8.4p1-5+deb11u7"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35385","cwe":"CWE-281","type":"Secondary","source":"cve@mitre.org"},{"cve":"CVE-2026-35385","cwe":"CWE-281","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-35385","date":"2026-10-08","epss":0.00633,"percentile":0.4874}],"risk":0.49373999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-35385","description":"In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode)."},"relatedVulnerabilities":[{"id":"CVE-2026-35385","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35385","cwe":"CWE-281","type":"Secondary","source":"cve@mitre.org"},{"cve":"CVE-2026-35385","cwe":"CWE-281","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-35385","date":"2026-10-08","epss":0.00633,"percentile":0.4874}],"urls":["https://marc.info/?l=openssh-unix-dev&m=177513443901484&w=2","https://www.openssh.org/releasenotes.html#10.3p1","https://www.openwall.com/lists/oss-security/2026/04/02/3","https://access.redhat.com/errata/RHSA-2026:12389","https://access.redhat.com/errata/RHSA-2026:13380","https://access.redhat.com/errata/RHSA-2026:13381","https://access.redhat.com/errata/RHSA-2026:13383","https://access.redhat.com/errata/RHSA-2026:14937","https://access.redhat.com/errata/RHSA-2026:16059","https://access.redhat.com/errata/RHSA-2026:19069","https://access.redhat.com/errata/RHSA-2026:19219","https://access.redhat.com/errata/RHSA-2026:20040","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:21298","https://access.redhat.com/errata/RHSA-2026:21398","https://access.redhat.com/errata/RHSA-2026:22329","https://access.redhat.com/errata/RHSA-2026:22468","https://access.redhat.com/errata/RHSA-2026:22564","https://access.redhat.com/errata/RHSA-2026:22648","https://access.redhat.com/errata/RHSA-2026:25044","https://access.redhat.com/errata/RHSA-2026:25063","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:25181","https://access.redhat.com/errata/RHSA-2026:26528","https://access.redhat.com/errata/RHSA-2026:26542","https://access.redhat.com/errata/RHSA-2026:28887","https://access.redhat.com/errata/RHSA-2026:28962","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:34098","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/security/cve/CVE-2026-35385","https://bugzilla.redhat.com/show_bug.cgi?id=2454469","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35385.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-35385","description":"In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode)."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.26"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-21502","versionConstraint":"< 1.8.0_441||>= 1.9, < 8.0.441||>= 12, < 17.0.14||>= 18, < 21.0.6||>= 22, < 23.0.2||>= 9, < 11.0.26 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-21502","fix":{"state":"fixed","versions":["1.8.0_441","8.0.441","11.0.26","17.0.14","21.0.6","23.0.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_441"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.441"},{"date":"2025-09-04","kind":"first-observed","version":"17.0.14"},{"date":"2025-09-04","kind":"first-observed","version":"21.0.6"},{"date":"2025-09-04","kind":"first-observed","version":"23.0.2"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.26"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-21502","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-21502","date":"2026-10-08","epss":0.01007,"percentile":0.61919}],"risk":0.49343,"urls":["https://www.oracle.com/security-alerts/cpujan2025.html","http://www.openwall.com/lists/oss-security/2025/01/25/6","https://lists.debian.org/debian-lts-announce/2025/01/msg00031.html","https://lists.debian.org/debian-lts-announce/2025/02/msg00004.html","https://security.netapp.com/advisory/ntap-20250124-0009/"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-21502","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM Enterprise Edition: 20.3.16 and  21.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"2e8fce5123048c5c","cpes":["cpe:2.3:a:curl:curl:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-5773","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-5773","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5773","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5773","cwe":"CWE-918","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5773","date":"2026-10-08","epss":0.00657,"percentile":0.49896}],"risk":0.49275,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-5773","description":"libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers.  libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead.  When reusing a connection a range of criteria must be met. Due to a logical error in the code, a network transfer operation that was requested by an application could wrongfully reuse an existing SMB connection to the same server that was using a different 'share' than the new subsequent transfer should.  This could in unlucky situations lead to the download of the wrong file or the upload of a file to the wrong place. When this happens, the same credentials are used and the server name is the same."},"relatedVulnerabilities":[{"id":"CVE-2026-5773","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5773","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5773","cwe":"CWE-918","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5773","date":"2026-10-08","epss":0.00657,"percentile":0.49896}],"urls":["https://curl.se/docs/CVE-2026-5773.html","https://curl.se/docs/CVE-2026-5773.json","https://hackerone.com/reports/3650689","http://www.openwall.com/lists/oss-security/2026/04/29/9"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5773","description":"libcurl might in some circumstances reuse the wrong connection for SMB(S)\ntransfers.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a network transfer operation that was requested by an\napplication could wrongfully reuse an existing SMB connection to the same\nserver that was using a different \"share\" than the new subsequent transfer\nshould.\n\nThis could in unlucky situations lead to the download of the wrong file or the\nupload of a file to the wrong place. When this happens, the same credentials\nare used and the server name is the same."}]},{"artifact":{"id":"c49c37d1cca2d246","cpes":["cpe:2.3:a:libcurl3-gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3-gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3_gnutls:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3-gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3:libcurl3_gnutls:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl3-gnutls","purl":"pkg:deb/debian/libcurl3-gnutls@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3-gnutls/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl3-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl3-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5773","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-5773","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5773","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5773","cwe":"CWE-918","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5773","date":"2026-10-08","epss":0.00657,"percentile":0.49896}],"risk":0.49275,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-5773","description":"libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers.  libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead.  When reusing a connection a range of criteria must be met. Due to a logical error in the code, a network transfer operation that was requested by an application could wrongfully reuse an existing SMB connection to the same server that was using a different 'share' than the new subsequent transfer should.  This could in unlucky situations lead to the download of the wrong file or the upload of a file to the wrong place. When this happens, the same credentials are used and the server name is the same."},"relatedVulnerabilities":[{"id":"CVE-2026-5773","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5773","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5773","cwe":"CWE-918","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5773","date":"2026-10-08","epss":0.00657,"percentile":0.49896}],"urls":["https://curl.se/docs/CVE-2026-5773.html","https://curl.se/docs/CVE-2026-5773.json","https://hackerone.com/reports/3650689","http://www.openwall.com/lists/oss-security/2026/04/29/9"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5773","description":"libcurl might in some circumstances reuse the wrong connection for SMB(S)\ntransfers.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a network transfer operation that was requested by an\napplication could wrongfully reuse an existing SMB connection to the same\nserver that was using a different \"share\" than the new subsequent transfer\nshould.\n\nThis could in unlucky situations lead to the download of the wrong file or the\nupload of a file to the wrong place. When this happens, the same credentials\nare used and the server name is the same."}]},{"artifact":{"id":"1cd1d48b6f5e3424","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.74.0-1.3\\+deb11u7:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/debian/libcurl4@7.74.0-1.3%2Bdeb11u7?arch=amd64&distro=debian-11.7&upstream=curl","type":"deb","version":"7.74.0-1.3+deb11u7","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5773","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"curl","version":"7.74.0-1.3+deb11u7"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-5773","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5773","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5773","cwe":"CWE-918","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5773","date":"2026-10-08","epss":0.00657,"percentile":0.49896}],"risk":0.49275,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-5773","description":"libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers.  libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead.  When reusing a connection a range of criteria must be met. Due to a logical error in the code, a network transfer operation that was requested by an application could wrongfully reuse an existing SMB connection to the same server that was using a different 'share' than the new subsequent transfer should.  This could in unlucky situations lead to the download of the wrong file or the upload of a file to the wrong place. When this happens, the same credentials are used and the server name is the same."},"relatedVulnerabilities":[{"id":"CVE-2026-5773","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5773","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5773","cwe":"CWE-918","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5773","date":"2026-10-08","epss":0.00657,"percentile":0.49896}],"urls":["https://curl.se/docs/CVE-2026-5773.html","https://curl.se/docs/CVE-2026-5773.json","https://hackerone.com/reports/3650689","http://www.openwall.com/lists/oss-security/2026/04/29/9"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5773","description":"libcurl might in some circumstances reuse the wrong connection for SMB(S)\ntransfers.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a network transfer operation that was requested by an\napplication could wrongfully reuse an existing SMB connection to the same\nserver that was using a different \"share\" than the new subsequent transfer\nshould.\n\nThis could in unlucky situations lead to the download of the wrong file or the\nupload of a file to the wrong place. When this happens, the same credentials\nare used and the server name is the same."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.20"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2023-22049","versionConstraint":"< 1.8.0_382||>= 1.9, < 8.0.382||>= 12, < 17.0.8||>= 18, < 20.0.2||>= 9, < 11.0.20 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2023-22049","fix":{"state":"fixed","versions":["1.8.0_382","8.0.382","11.0.20","17.0.8","20.0.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_382"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.382"},{"date":"2025-09-04","kind":"first-observed","version":"17.0.8"},{"date":"2025-09-04","kind":"first-observed","version":"20.0.2"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.20"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-22049","date":"2026-10-08","epss":0.01469,"percentile":0.72949}],"risk":0.4921149999999999,"urls":["https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html","https://security.netapp.com/advisory/ntap-20230725-0006/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.debian.org/security/2023/dsa-5458","https://www.debian.org/security/2023/dsa-5478","https://www.oracle.com/security-alerts/cpujul2023.html","https://openjdk.org/groups/vulnerability/advisories/2023-07-18"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-22049","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7 and  20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4224","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4224","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.13||>= 3.14.0, < 3.14.4||>= 3.15.0a1, < 3.15.0a8 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-4224","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.13","3.14.4","3.15.0a8"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.13"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.4"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0a8"},{"date":"2026-09-15","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-15","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-15","kind":"first-observed","version":"3.12.14"},{"date":"2026-04-10","kind":"first-observed","version":"3.13.13"},{"date":"2026-04-10","kind":"first-observed","version":"3.14.4"},{"date":"2026-04-10","kind":"first-observed","version":"3.15.0a8"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4224","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-4224","date":"2026-10-08","epss":0.0069,"percentile":0.51296}],"risk":0.49162500000000003,"urls":["https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a","https://github.com/python/cpython/commit/24ce88b285f56ee11626cf5e472af3cd8cc7c621","https://github.com/python/cpython/commit/642865ddf4b232da1f3b1f7abcfa3254c4bfe785","https://github.com/python/cpython/commit/af856a7177326ac25d9f66cc6dd28b554d914fee","https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3","https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768","https://github.com/python/cpython/issues/145986","https://github.com/python/cpython/pull/145987","https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/","http://www.openwall.com/lists/oss-security/2026/03/16/4"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4224","description":"When an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs."},"relatedVulnerabilities":[]},{"artifact":{"id":"46d3fb386aab3fd6","cpes":["cpe:2.3:a:bouncycastle-org:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bcprov_jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov_jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov_jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov_jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov_jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov_jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov-jdk15on:1.70:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov_jdk15on:1.70:*:*:*:*:*:*:*"],"name":"bcprov-jdk15on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70","type":"java-archive","version":"1.70","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/bouncycastle-api.hpi:WEB-INF/optional-lib/bcprov-jdk15on-1.70.jar","manifestName":"","pomArtifactID":"bcprov-jdk15on","archiveDigests":[{"value":"4636a0d01f74acaf28082fb62b317f1080118371","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/bouncycastle-api.hpi:WEB-INF/optional-lib/bcprov-jdk15on-1.70.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.78"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-v435-xc8x-wvr9","versionConstraint":"<1.78 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcprov-jdk15on","version":"1.70"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-v435-xc8x-wvr9","fix":{"state":"fixed","versions":["1.78"],"available":[{"date":"2024-05-15","kind":"first-observed","version":"1.78"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-30171","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-30171","date":"2026-10-08","epss":0.00901,"percentile":0.58483}],"risk":0.4910450000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-30171","https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171","https://www.bouncycastle.org/latest_releases.html","https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c217","https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb0","https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d","https://security.netapp.com/advisory/ntap-20240614-0008"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-v435-xc8x-wvr9","description":"Bouncy Castle affected by timing side-channel for RSA key exchange (\"The Marvin Attack\")"},"relatedVulnerabilities":[{"id":"CVE-2024-30171","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-30171","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-30171","date":"2026-10-08","epss":0.00901,"percentile":0.58483}],"urls":["https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171","https://security.netapp.com/advisory/ntap-20240614-0008/","https://www.bouncycastle.org/latest_releases.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-30171","description":"An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing."}]},{"artifact":{"id":"7d44d2d3a3f39959","cpes":["cpe:2.3:a:bouncycastle-org:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bcprov_jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov_jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov_jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk18on:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk18on:bcprov_jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk18on:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk18on:bcprov_jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov_jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov-jdk18on:1.73:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov_jdk18on:1.73:*:*:*:*:*:*:*"],"name":"bcprov-jdk18on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk18on@1.73","type":"java-archive","version":"1.73","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/usr/share/jenkins/ref/plugins/bouncycastle-api.jpi:WEB-INF/optional-lib/bcprov-jdk18on-1.73.jar","manifestName":"","pomArtifactID":"bcprov-jdk18on","archiveDigests":[{"value":"4bd3de48e5153059fe3f80cbcf86ea221795ee55","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/bouncycastle-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/bouncycastle-api.jpi:WEB-INF/optional-lib/bcprov-jdk18on-1.73.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.78"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-v435-xc8x-wvr9","versionConstraint":"<1.78 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcprov-jdk18on","version":"1.73"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-v435-xc8x-wvr9","fix":{"state":"fixed","versions":["1.78"],"available":[{"date":"2024-05-15","kind":"first-observed","version":"1.78"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-30171","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-30171","date":"2026-10-08","epss":0.00901,"percentile":0.58483}],"risk":0.4910450000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-30171","https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171","https://www.bouncycastle.org/latest_releases.html","https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c217","https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb0","https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d","https://security.netapp.com/advisory/ntap-20240614-0008"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-v435-xc8x-wvr9","description":"Bouncy Castle affected by timing side-channel for RSA key exchange (\"The Marvin Attack\")"},"relatedVulnerabilities":[{"id":"CVE-2024-30171","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-30171","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-30171","date":"2026-10-08","epss":0.00901,"percentile":0.58483}],"urls":["https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171","https://security.netapp.com/advisory/ntap-20240614-0008/","https://www.bouncycastle.org/latest_releases.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-30171","description":"An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.24.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2025-4006","versionConstraint":"<1.24.8||>=1.25.0,<1.25.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2025-4006","fix":{"state":"fixed","versions":["1.24.8","1.25.2"],"available":[{"date":"2025-10-07","kind":"release","version":"1.24.8"},{"date":"2025-10-07","kind":"release","version":"1.25.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-61725","date":"2026-10-08","epss":0.00647,"percentile":0.49441}],"risk":0.48525,"urls":["https://go.dev/issue/75680","https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/709860","description":"The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption."},"relatedVulnerabilities":[{"id":"CVE-2025-61725","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-61725","date":"2026-10-08","epss":0.00647,"percentile":0.49441}],"urls":["https://go.dev/cl/709860","https://go.dev/issue/75680","https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI","https://pkg.go.dev/vuln/GO-2025-4006","http://www.openwall.com/lists/oss-security/2025/10/08/1"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-61725","description":"The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption."}]},{"artifact":{"id":"25ad583843de9509","cpes":["cpe:2.3:a:org.eclipse.jetty:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-http:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-http:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_http:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_http:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty-http:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty-http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty_http:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty_http:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty:10.0.15:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty:10.0.15:*:*:*:*:*:*:*"],"name":"jetty-http","purl":"pkg:maven/org.eclipse.jetty/jetty-http@10.0.15","type":"java-archive","version":"10.0.15","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jetty","virtualPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar:org.eclipse.jetty:jetty-http","manifestName":"","pomArtifactID":"jetty-http","archiveDigests":null},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:executable/winstone.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"12.0.12"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qh8g-58pp-2wxh","versionConstraint":">=7.0.0,<=12.0.11 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jetty:jetty-http","version":"10.0.15"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-qh8g-58pp-2wxh","fix":{"state":"fixed","versions":["12.0.12"],"available":[{"date":"2024-10-15","kind":"first-observed","version":"12.0.12"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6763","cwe":"CWE-1286","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2024-6763","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-6763","date":"2026-10-08","epss":0.00965,"percentile":0.60529}],"risk":0.48250000000000004,"urls":["https://github.com/jetty/jetty.project/security/advisories/GHSA-qh8g-58pp-2wxh","https://nvd.nist.gov/vuln/detail/CVE-2024-6763","https://github.com/jetty/jetty.project/pull/12012","https://gitlab.eclipse.org/security/cve-assignement/-/issues/25","https://security.netapp.com/advisory/ntap-20250306-0005"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qh8g-58pp-2wxh","description":"Eclipse Jetty URI parsing of invalid authority"},"relatedVulnerabilities":[{"id":"CVE-2024-6763","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6763","cwe":"CWE-1286","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2024-6763","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-6763","date":"2026-10-08","epss":0.00965,"percentile":0.60529}],"urls":["https://github.com/jetty/jetty.project/pull/12012","https://github.com/jetty/jetty.project/security/advisories/GHSA-qh8g-58pp-2wxh","https://gitlab.eclipse.org/security/cve-assignement/-/issues/25","https://security.netapp.com/advisory/ntap-20250306-0005/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6763","description":"Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL parsing.\n\nThe HttpURI class does insufficient validation on the authority segment of a URI.  However the behaviour of HttpURI\n differs from the common browsers in how it handles a URI that would be \nconsidered invalid if fully validated against the RRC.  Specifically HttpURI\n and the browser may differ on the value of the host extracted from an \ninvalid URI and thus a combination of Jetty and a vulnerable browser may\n be vulnerable to a open redirect attack or to a SSRF attack if the URI \nis used after passing validation checks."}]},{"artifact":{"id":"e974360838add45f","cpes":["cpe:2.3:a:golang:crypto:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4","type":"go-module","version":"v0.0.0-20220411220226-7b82a4e95df4","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.52.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-x527-x647-q7gg","versionConstraint":"<0.52.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.0.0-20220411220226-7b82a4e95df4"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-x527-x647-q7gg","fix":{"state":"fixed","versions":["0.52.0"],"available":[{"date":"2026-07-07","kind":"first-observed","version":"0.52.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L","metrics":{"baseScore":10,"impactScore":6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46595","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-46595","cwe":"CWE-303","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-46595","date":"2026-10-08","epss":0.00503,"percentile":0.41132}],"risk":0.47785,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-45337","https://nvd.nist.gov/vuln/detail/CVE-2026-46595","https://go.dev/cl/781642","https://go.dev/issue/79570","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5023","https://access.redhat.com/errata/RHSA-2026:23262","https://access.redhat.com/errata/RHSA-2026:23264","https://access.redhat.com/errata/RHSA-2026:26546","https://access.redhat.com/errata/RHSA-2026:26547","https://access.redhat.com/errata/RHSA-2026:30650","https://access.redhat.com/errata/RHSA-2026:30651","https://access.redhat.com/security/cve/CVE-2026-46595","https://bugzilla.redhat.com/show_bug.cgi?id=2480689","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46595.json","https://access.redhat.com/errata/RHSA-2026:33531","https://access.redhat.com/errata/RHSA-2026:33524","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:36207","https://access.redhat.com/errata/RHSA-2026:36820","https://access.redhat.com/errata/RHSA-2026:36808","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:37275","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:41036","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:40945"],"severity":"Critical","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-x527-x647-q7gg","description":"golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement"},"relatedVulnerabilities":[{"id":"CVE-2026-46595","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":7.1,"impactScore":5.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L","metrics":{"baseScore":10,"impactScore":6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46595","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-46595","cwe":"CWE-303","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-46595","date":"2026-10-08","epss":0.00503,"percentile":0.41132}],"urls":["https://go.dev/cl/781642","https://go.dev/issue/79570","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5023","https://access.redhat.com/errata/RHSA-2026:23262","https://access.redhat.com/errata/RHSA-2026:23264","https://access.redhat.com/errata/RHSA-2026:26546","https://access.redhat.com/errata/RHSA-2026:26547","https://access.redhat.com/errata/RHSA-2026:30650","https://access.redhat.com/errata/RHSA-2026:30651","https://access.redhat.com/errata/RHSA-2026:33524","https://access.redhat.com/errata/RHSA-2026:33531","https://access.redhat.com/errata/RHSA-2026:36207","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:36808","https://access.redhat.com/errata/RHSA-2026:36820","https://access.redhat.com/errata/RHSA-2026:37275","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41036","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:47737","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:54531","https://access.redhat.com/errata/RHSA-2026:59467","https://access.redhat.com/errata/RHSA-2026:59558","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61314","https://access.redhat.com/errata/RHSA-2026:66022","https://access.redhat.com/errata/RHSA-2026:66521","https://access.redhat.com/security/cve/CVE-2026-46595","https://bugzilla.redhat.com/show_bug.cgi?id=2480689","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46595.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46595","description":"Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped."}]},{"artifact":{"id":"e974360838add45f","cpes":["cpe:2.3:a:golang:crypto:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4","type":"go-module","version":"v0.0.0-20220411220226-7b82a4e95df4","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.0.0-20220525230936-793ad666bf5e"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2024-2961","versionConstraint":"<0.0.0-20220525230936-793ad666bf5e (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.0.0-20220411220226-7b82a4e95df4"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2024-2961","fix":{"state":"fixed","versions":["0.0.0-20220525230936-793ad666bf5e"],"available":[{"date":"2022-05-25","kind":"release","version":"0.0.0-20220525230936-793ad666bf5e"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2022-30636","date":"2026-10-08","epss":0.00637,"percentile":0.48936}],"risk":0.47774999999999995,"urls":["https://go.dev/issue/53082"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/408694","description":"httpTokenCacheKey uses path.Base to extract the expected HTTP-01 token value to lookup in the DirCache implementation. On Windows, path.Base acts differently to filepath.Base, since Windows uses a different path separator (\\ vs. /), allowing a user to provide a relative path, i.e. .well-known/acme-challenge/..\\..\\asd becomes ..\\..\\asd. The extracted path is then suffixed with +http-01, joined with the cache directory, and opened.\n\nSince the controlled path is suffixed with +http-01 before opening, the impact of this is significantly limited, since it only allows reading arbitrary files on the system if and only if they have this suffix."},"relatedVulnerabilities":[{"id":"CVE-2022-30636","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2022-30636","date":"2026-10-08","epss":0.00637,"percentile":0.48936}],"urls":["https://go.dev/cl/408694","https://go.dev/issue/53082","https://pkg.go.dev/vuln/GO-2024-2961"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-30636","description":"httpTokenCacheKey uses path.Base to extract the expected HTTP-01 token value to lookup in the DirCache implementation. On Windows, path.Base acts differently to filepath.Base, since Windows uses a different path separator (\\ vs. /), allowing a user to provide a relative path, i.e. .well-known/acme-challenge/..\\..\\asd becomes ..\\..\\asd. The extracted path is then suffixed with +http-01, joined with the cache directory, and opened. Since the controlled path is suffixed with +http-01 before opening, the impact of this is significantly limited, since it only allows reading arbitrary files on the system if and only if they have this suffix."}]},{"artifact":{"id":"4479f0b503eeee9d","cpes":["cpe:2.3:a:org.eclipse.jgit-parent:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit-parent:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit-parent:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit-parent:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*"],"name":"org.eclipse.jgit","purl":"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.5.0.202303070854-r","type":"java-archive","version":"6.5.0.202303070854-r","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jgit","virtualPath":"/usr/share/jenkins/ref/plugins/git-client.jpi:WEB-INF/lib/org.eclipse.jgit-6.5.0.202303070854-r.jar","manifestName":"","pomArtifactID":"org.eclipse.jgit","archiveDigests":[{"value":"a846f632cf00da830745b721807d05ddf3e0790f","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/git-client.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/git-client.jpi:WEB-INF/lib/org.eclipse.jgit-6.5.0.202303070854-r.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"6.10.1.202505221210-r"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vrpq-qp53-qv56","versionConstraint":">=6.1.0.202203080745-r,<6.10.1.202505221210-r (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jgit:org.eclipse.jgit","version":"6.5.0.202303070854-r"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-vrpq-qp53-qv56","fix":{"state":"fixed","versions":["6.10.1.202505221210-r"],"available":[{"date":"2025-05-24","kind":"first-observed","version":"6.10.1.202505221210-r"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4949","cwe":"CWE-611","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2025-4949","cwe":"CWE-827","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2025-4949","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-4949","date":"2026-10-08","epss":0.00809,"percentile":0.55595}],"risk":0.47730999999999996,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-4949","https://gitlab.eclipse.org/security/cve-assignement/-/issues/64","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281","https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1","https://projects.eclipse.org/projects/technology.jgit/releases/6.10.1","https://projects.eclipse.org/projects/technology.jgit/releases/7.0.1","https://projects.eclipse.org/projects/technology.jgit/releases/7.1.1","https://projects.eclipse.org/projects/technology.jgit/releases/5.13.4","https://projects.eclipse.org/projects/technology.jgit/releases/5.13.5"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vrpq-qp53-qv56","description":"Eclipse JGit XML External Entity (XXE) Vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2025-4949","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:L/U:Green","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4949","cwe":"CWE-611","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2025-4949","cwe":"CWE-827","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2025-4949","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-4949","date":"2026-10-08","epss":0.00809,"percentile":0.55595}],"urls":["https://gitlab.eclipse.org/security/cve-assignement/-/issues/64","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281","https://projects.eclipse.org/projects/technology.jgit/releases/5.13.4","https://projects.eclipse.org/projects/technology.jgit/releases/6.10.1","https://projects.eclipse.org/projects/technology.jgit/releases/7.0.1","https://projects.eclipse.org/projects/technology.jgit/releases/7.1.1","https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4949","description":"In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues."}]},{"artifact":{"id":"0febc9b71cc5977c","cpes":["cpe:2.3:a:org.eclipse.jgit-parent:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit-parent:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit-parent:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit-parent:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-org---jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_org___jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:org.eclipse.jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit-parent:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:jgit-parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:jgit_parent:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit_parent:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*","cpe:2.3:a:jgit:jgit:6.5.0.202303070854-r:*:*:*:*:*:*:*"],"name":"org.eclipse.jgit","purl":"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.5.0.202303070854-r","type":"java-archive","version":"6.5.0.202303070854-r","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.jgit","virtualPath":"/usr/share/jenkins/ref/plugins/blueocean-git-pipeline.jpi:WEB-INF/lib/org.eclipse.jgit-6.5.0.202303070854-r.jar","manifestName":"","pomArtifactID":"org.eclipse.jgit","archiveDigests":[{"value":"a846f632cf00da830745b721807d05ddf3e0790f","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/blueocean-git-pipeline.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/blueocean-git-pipeline.jpi:WEB-INF/lib/org.eclipse.jgit-6.5.0.202303070854-r.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"6.10.1.202505221210-r"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vrpq-qp53-qv56","versionConstraint":">=6.1.0.202203080745-r,<6.10.1.202505221210-r (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jgit:org.eclipse.jgit","version":"6.5.0.202303070854-r"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-vrpq-qp53-qv56","fix":{"state":"fixed","versions":["6.10.1.202505221210-r"],"available":[{"date":"2025-05-24","kind":"first-observed","version":"6.10.1.202505221210-r"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4949","cwe":"CWE-611","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2025-4949","cwe":"CWE-827","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2025-4949","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-4949","date":"2026-10-08","epss":0.00809,"percentile":0.55595}],"risk":0.47730999999999996,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-4949","https://gitlab.eclipse.org/security/cve-assignement/-/issues/64","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281","https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1","https://projects.eclipse.org/projects/technology.jgit/releases/6.10.1","https://projects.eclipse.org/projects/technology.jgit/releases/7.0.1","https://projects.eclipse.org/projects/technology.jgit/releases/7.1.1","https://projects.eclipse.org/projects/technology.jgit/releases/5.13.4","https://projects.eclipse.org/projects/technology.jgit/releases/5.13.5"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vrpq-qp53-qv56","description":"Eclipse JGit XML External Entity (XXE) Vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2025-4949","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:L/U:Green","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4949","cwe":"CWE-611","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2025-4949","cwe":"CWE-827","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2025-4949","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-4949","date":"2026-10-08","epss":0.00809,"percentile":0.55595}],"urls":["https://gitlab.eclipse.org/security/cve-assignement/-/issues/64","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281","https://projects.eclipse.org/projects/technology.jgit/releases/5.13.4","https://projects.eclipse.org/projects/technology.jgit/releases/6.10.1","https://projects.eclipse.org/projects/technology.jgit/releases/7.0.1","https://projects.eclipse.org/projects/technology.jgit/releases/7.1.1","https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4949","description":"In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-9669","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-9669","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b3 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-9669","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b3"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b3"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-25","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-25","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-25","kind":"first-observed","version":"3.15.0b3"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9669","cwe":"CWE-121","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-9669","date":"2026-10-08","epss":0.00605,"percentile":0.47336}],"risk":0.47492499999999993,"urls":["https://github.com/python/cpython/commit/157a5df8cb5d82b33f918a7489e72ce95ceb12b6","https://github.com/python/cpython/commit/1ba6135eae75ad8413413caeeedb56ae72320636","https://github.com/python/cpython/commit/5755d0f083949ff3c5bf3a37e673e24e306b036e","https://github.com/python/cpython/commit/619a12b2e545391dc436b3af79dda22337382a6f","https://github.com/python/cpython/commit/938ec030e90c5e53f1faac6fab1643f14e4f4a79","https://github.com/python/cpython/commit/991e6cf86496718c4ef00b362d640e00cb5c85b2","https://github.com/python/cpython/commit/d3ca26983dfbccdf609f24ff5877dc3118e4702d","https://github.com/python/cpython/issues/150599","https://github.com/python/cpython/pull/150600","https://mail.python.org/archives/list/security-announce@python.org/thread/DBJZETMGUIFK7DVUWMOXHD3Z6IX2QPSX/","http://www.openwall.com/lists/oss-security/2026/06/08/17"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9669","description":"bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data."},"relatedVulnerabilities":[]},{"artifact":{"id":"7e308731b874ffa3","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.7.1-5\\+deb11u3:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u3?arch=amd64&distro=debian-11.7&upstream=gnutls28","type":"deb","version":"3.7.1-5+deb11u3","language":"","licenses":["sha256:1934ff9a4bb0ed9238392c228e8c9cca0858b22d8528c2ac6b9ea45129d55330"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.7.1-5+deb11u10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42015","versionConstraint":"< 3.7.1-5+deb11u10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"gnutls28","version":"3.7.1-5+deb11u3"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-42015","fix":{"state":"fixed","versions":["3.7.1-5+deb11u10"],"available":[{"date":"2026-05-23","kind":"first-observed","version":"3.7.1-5+deb11u10"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42015","cwe":"CWE-193","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42015","date":"2026-10-08","epss":0.0092,"percentile":0.59061}],"risk":0.4738,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-42015","description":"A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts."},"relatedVulnerabilities":[{"id":"CVE-2026-42015","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42015","cwe":"CWE-193","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42015","date":"2026-10-08","epss":0.0092,"percentile":0.59061}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-42015","https://bugzilla.redhat.com/show_bug.cgi?id=2467678","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-11"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42015","description":"A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts."}]},{"artifact":{"id":"c103c066c49ae324","cpes":["cpe:2.3:a:golang:networking:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2","type":"go-module","version":"v0.0.0-20211112202133-69e39bad7dc2","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.56.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-5942","versionConstraint":"<0.56.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.0.0-20211112202133-69e39bad7dc2"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-5942","fix":{"state":"fixed","versions":["0.56.0"],"available":[{"date":"2026-06-09","kind":"release","version":"0.56.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46600","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-46600","date":"2026-10-08","epss":0.0063,"percentile":0.48566}],"risk":0.47250000000000003,"urls":["https://go.dev/issue/79795","https://groups.google.com/g/golang-announce/c/94pEornpRlI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/786345","description":"Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer."},"relatedVulnerabilities":[{"id":"CVE-2026-46600","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46600","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-46600","date":"2026-10-08","epss":0.0063,"percentile":0.48566}],"urls":["https://go.dev/cl/786345","https://go.dev/issue/79795","https://groups.google.com/g/golang-announce/c/94pEornpRlI","https://pkg.go.dev/vuln/GO-2026-5942"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46600","description":"Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer."}]},{"artifact":{"id":"c103c066c49ae324","cpes":["cpe:2.3:a:golang:networking:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*","cpe:2.3:a:golang:net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:go:*:*"],"name":"golang.org/x/net","purl":"pkg:golang/golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2","type":"go-module","version":"v0.0.0-20211112202133-69e39bad7dc2","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.13.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2wrh-6pvc-2jm9","versionConstraint":"<0.13.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/net","version":"v0.0.0-20211112202133-69e39bad7dc2"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-2wrh-6pvc-2jm9","fix":{"state":"fixed","versions":["0.13.0"],"available":[{"date":"2023-10-12","kind":"first-observed","version":"0.13.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3978","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3978","date":"2026-10-08","epss":0.00851,"percentile":0.56925}],"risk":0.472305,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-3978","https://go.dev/cl/514896","https://go.dev/issue/61615","https://pkg.go.dev/vuln/GO-2023-1988"],"severity":"Medium","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2wrh-6pvc-2jm9","description":"Improper rendering of text nodes in golang.org/x/net/html"},"relatedVulnerabilities":[{"id":"CVE-2023-3978","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3978","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3978","date":"2026-10-08","epss":0.00851,"percentile":0.56925}],"urls":["https://go.dev/cl/514896","https://go.dev/issue/61615","https://pkg.go.dev/vuln/GO-2023-1988"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3978","description":"Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.22"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-20921","versionConstraint":"< 1.8.0_402||>= 1.9, < 8.0.402||>= 12, < 17.0.10||>= 18, < 21.0.2||>= 9, < 11.0.22 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-20921","fix":{"state":"fixed","versions":["1.8.0_402","8.0.402","11.0.22","17.0.10","21.0.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_402"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.402"},{"date":"2025-09-04","kind":"first-observed","version":"17.0.10"},{"date":"2025-09-04","kind":"first-observed","version":"21.0.2"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.22"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-20921","cwe":"CWE-276","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-20921","date":"2026-10-08","epss":0.00864,"percentile":0.57356}],"risk":0.4708800000000001,"urls":["https://www.oracle.com/security-alerts/cpujan2024.html","https://security.netapp.com/advisory/ntap-20240201-0002/","https://security.netapp.com/advisory/ntap-20241108-0002/","https://openjdk.org/groups/vulnerability/advisories/2024-01-16"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-20921","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"b2e77aa5ecffb7d4","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0915","versionConstraint":"< 2.31-13+deb11u14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-0915","fix":{"state":"fixed","versions":["2.31-13+deb11u14"],"available":[{"date":"2026-06-09","kind":"first-observed","version":"2.31-13+deb11u14"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-08","epss":0.00627,"percentile":0.48446}],"risk":0.47025,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-0915","description":"Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver."},"relatedVulnerabilities":[{"id":"CVE-2026-0915","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-08","epss":0.00627,"percentile":0.48446}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33802","http://www.openwall.com/lists/oss-security/2026/01/16/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0915","description":"Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver."}]},{"artifact":{"id":"c2e60422a6017463","cpes":["cpe:2.3:a:libc6:libc6:2.31-13\\+deb11u6:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.31-13%2Bdeb11u6?arch=amd64&distro=debian-11.7&upstream=glibc","type":"deb","version":"2.31-13+deb11u6","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-13+deb11u14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0915","versionConstraint":"< 2.31-13+deb11u14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"glibc","version":"2.31-13+deb11u6"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-0915","fix":{"state":"fixed","versions":["2.31-13+deb11u14"],"available":[{"date":"2026-06-09","kind":"first-observed","version":"2.31-13+deb11u14"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-08","epss":0.00627,"percentile":0.48446}],"risk":0.47025,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-0915","description":"Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver."},"relatedVulnerabilities":[{"id":"CVE-2026-0915","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-08","epss":0.00627,"percentile":0.48446}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33802","http://www.openwall.com/lists/oss-security/2026/01/16/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0915","description":"Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver."}]},{"artifact":{"id":"e8278af7cc57a5fc","cpes":["cpe:2.3:a:com.coravy.hudson.plugins.github:github:1.37.1:*:*:*:*:*:*:*","cpe:2.3:a:coravy:github:1.37.1:*:*:*:*:*:*:*","cpe:2.3:a:github:github:1.37.1:*:*:*:*:*:*:*","cpe:2.3:a:hudson:github:1.37.1:*:*:*:*:*:*:*"],"name":"github","purl":"pkg:maven/com.coravy.hudson.plugins.github/github@1.37.1","type":"java-archive","version":"1.37.1","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"com.coravy.hudson.plugins.github","virtualPath":"/usr/share/jenkins/ref/plugins/github.jpi","manifestName":"","pomArtifactID":"github","archiveDigests":[{"value":"1eb2a847bcdf485bdccddd7b4a37039888ee874a","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/github.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/github.jpi","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.37.3.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mv77-fj63-q5w8","versionConstraint":"<1.37.3.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.coravy.hudson.plugins.github:github","version":"1.37.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-mv77-fj63-q5w8","fix":{"state":"fixed","versions":["1.37.3.1"],"available":[{"date":"2023-10-31","kind":"first-observed","version":"1.37.3.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46650","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-46650","date":"2026-10-08","epss":0.00606,"percentile":0.47381}],"risk":0.46965,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-46650","https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3246","http://www.openwall.com/lists/oss-security/2023/10/25/2","https://github.com/jenkinsci/github-plugin/commit/9e09678c445613521c45acce0ce525160747ff3e"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mv77-fj63-q5w8","description":"Stored XSS vulnerability in Jenkins GitHub Plugin"},"relatedVulnerabilities":[{"id":"CVE-2023-46650","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46650","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-46650","date":"2026-10-08","epss":0.00606,"percentile":0.47381}],"urls":["http://www.openwall.com/lists/oss-security/2023/10/25/2","https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3246"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-46650","description":"Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission."}]},{"artifact":{"id":"5a3588ee87bbc570","cpes":["cpe:2.3:a:com.coravy.hudson.plugins.github:github:1.37.1:*:*:*:*:*:*:*","cpe:2.3:a:coravy:github:1.37.1:*:*:*:*:*:*:*","cpe:2.3:a:github:github:1.37.1:*:*:*:*:*:*:*","cpe:2.3:a:hudson:github:1.37.1:*:*:*:*:*:*:*"],"name":"github","purl":"pkg:maven/com.coravy.hudson.plugins.github/github@1.37.1","type":"java-archive","version":"1.37.1","language":"java","licenses":["MIT License"],"metadata":{"pomGroupID":"com.coravy.hudson.plugins.github","virtualPath":"/usr/share/jenkins/ref/plugins/github.jpi:WEB-INF/lib/github.jar","manifestName":"","pomArtifactID":"github","archiveDigests":[{"value":"89c68ec4545e1cafed844b8f3883f424200b3887","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/github.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/github.jpi:WEB-INF/lib/github.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.37.3.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mv77-fj63-q5w8","versionConstraint":"<1.37.3.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.coravy.hudson.plugins.github:github","version":"1.37.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-mv77-fj63-q5w8","fix":{"state":"fixed","versions":["1.37.3.1"],"available":[{"date":"2023-10-31","kind":"first-observed","version":"1.37.3.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46650","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-46650","date":"2026-10-08","epss":0.00606,"percentile":0.47381}],"risk":0.46965,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-46650","https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3246","http://www.openwall.com/lists/oss-security/2023/10/25/2","https://github.com/jenkinsci/github-plugin/commit/9e09678c445613521c45acce0ce525160747ff3e"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mv77-fj63-q5w8","description":"Stored XSS vulnerability in Jenkins GitHub Plugin"},"relatedVulnerabilities":[{"id":"CVE-2023-46650","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46650","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-46650","date":"2026-10-08","epss":0.00606,"percentile":0.47381}],"urls":["http://www.openwall.com/lists/oss-security/2023/10/25/2","https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3246"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-46650","description":"Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission."}]},{"artifact":{"id":"e974360838add45f","cpes":["cpe:2.3:a:golang:crypto:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4","type":"go-module","version":"v0.0.0-20220411220226-7b82a4e95df4","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.43.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2025-4116","versionConstraint":"<0.43.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.0.0-20220411220226-7b82a4e95df4"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2025-4116","fix":{"state":"fixed","versions":["0.43.0"],"available":[{"date":"2025-10-08","kind":"release","version":"0.43.0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-47913","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-47913","date":"2026-10-08","epss":0.00623,"percentile":0.48255}],"risk":0.46725000000000005,"urls":["https://go.dev/issue/75178","https://github.com/advisories/GHSA-56w8-48fp-6mgv"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/700295","description":"SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process."},"relatedVulnerabilities":[{"id":"CVE-2025-47913","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-47913","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-47913","date":"2026-10-08","epss":0.00623,"percentile":0.48255}],"urls":["https://github.com/advisories/GHSA-56w8-48fp-6mgv","https://go.dev/cl/700295","https://go.dev/issue/75178","https://pkg.go.dev/vuln/GO-2025-4116"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-47913","description":"SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process."}]},{"artifact":{"id":"e974360838add45f","cpes":["cpe:2.3:a:golang:crypto:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4","type":"go-module","version":"v0.0.0-20220411220226-7b82a4e95df4","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.52.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-w879-237q-wc7r","versionConstraint":"<0.52.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.0.0-20220411220226-7b82a4e95df4"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-w879-237q-wc7r","fix":{"state":"fixed","versions":["0.52.0"],"available":[{"date":"2026-07-07","kind":"first-observed","version":"0.52.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39829","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-39829","cwe":"CWE-1284","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39829","date":"2026-10-08","epss":0.00623,"percentile":0.48242}],"risk":0.46725000000000005,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-39829","https://go.dev/cl/781641","https://go.dev/cl/781661","https://go.dev/issue/79565","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5018","https://access.redhat.com/errata/RHSA-2026:29455","https://access.redhat.com/security/cve/CVE-2026-39829","https://bugzilla.redhat.com/show_bug.cgi?id=2480681","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39829.json","https://access.redhat.com/errata/RHSA-2026:26546","https://access.redhat.com/errata/RHSA-2026:26547","https://access.redhat.com/errata/RHSA-2026:35833","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:36625","https://access.redhat.com/errata/RHSA-2026:36319","https://access.redhat.com/errata/RHSA-2026:36207","https://access.redhat.com/errata/RHSA-2026:36199","https://access.redhat.com/errata/RHSA-2026:37271","https://access.redhat.com/errata/RHSA-2026:37268","https://access.redhat.com/errata/RHSA-2026:37123","https://access.redhat.com/errata/RHSA-2026:37072","https://access.redhat.com/errata/RHSA-2026:36883","https://access.redhat.com/errata/RHSA-2026:36820","https://access.redhat.com/errata/RHSA-2026:36808","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:37272","https://access.redhat.com/errata/RHSA-2026:37278","https://access.redhat.com/errata/RHSA-2026:37286","https://access.redhat.com/errata/RHSA-2026:37296","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40119","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:40969","https://access.redhat.com/errata/RHSA-2026:40974","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:40972","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:41036","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:41055"],"severity":"High","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-w879-237q-wc7r","description":"golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS"},"relatedVulnerabilities":[{"id":"CVE-2026-39829","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39829","cwe":"CWE-347","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-39829","cwe":"CWE-1284","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39829","date":"2026-10-08","epss":0.00623,"percentile":0.48242}],"urls":["https://go.dev/cl/781641","https://go.dev/cl/781661","https://go.dev/issue/79565","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5018","https://access.redhat.com/errata/RHSA-2026:26546","https://access.redhat.com/errata/RHSA-2026:26547","https://access.redhat.com/errata/RHSA-2026:29455","https://access.redhat.com/errata/RHSA-2026:35833","https://access.redhat.com/errata/RHSA-2026:36199","https://access.redhat.com/errata/RHSA-2026:36207","https://access.redhat.com/errata/RHSA-2026:36319","https://access.redhat.com/errata/RHSA-2026:36625","https://access.redhat.com/errata/RHSA-2026:36648","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:36797","https://access.redhat.com/errata/RHSA-2026:36808","https://access.redhat.com/errata/RHSA-2026:36820","https://access.redhat.com/errata/RHSA-2026:36883","https://access.redhat.com/errata/RHSA-2026:37072","https://access.redhat.com/errata/RHSA-2026:37123","https://access.redhat.com/errata/RHSA-2026:37268","https://access.redhat.com/errata/RHSA-2026:37271","https://access.redhat.com/errata/RHSA-2026:37272","https://access.redhat.com/errata/RHSA-2026:37278","https://access.redhat.com/errata/RHSA-2026:37286","https://access.redhat.com/errata/RHSA-2026:37296","https://access.redhat.com/errata/RHSA-2026:37387","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40262","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:40969","https://access.redhat.com/errata/RHSA-2026:40972","https://access.redhat.com/errata/RHSA-2026:40974","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41031","https://access.redhat.com/errata/RHSA-2026:41036","https://access.redhat.com/errata/RHSA-2026:41055","https://access.redhat.com/errata/RHSA-2026:41066","https://access.redhat.com/errata/RHSA-2026:42146","https://access.redhat.com/errata/RHSA-2026:42796","https://access.redhat.com/errata/RHSA-2026:43052","https://access.redhat.com/errata/RHSA-2026:43692","https://access.redhat.com/errata/RHSA-2026:46885","https://access.redhat.com/errata/RHSA-2026:46903","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:47949","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:48693","https://access.redhat.com/errata/RHSA-2026:49944","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:52857","https://access.redhat.com/errata/RHSA-2026:52910","https://access.redhat.com/errata/RHSA-2026:54400","https://access.redhat.com/errata/RHSA-2026:54432","https://access.redhat.com/errata/RHSA-2026:57191","https://access.redhat.com/errata/RHSA-2026:57194","https://access.redhat.com/errata/RHSA-2026:57365","https://access.redhat.com/errata/RHSA-2026:57801","https://access.redhat.com/errata/RHSA-2026:59467","https://access.redhat.com/errata/RHSA-2026:59559","https://access.redhat.com/errata/RHSA-2026:59593","https://access.redhat.com/errata/RHSA-2026:60446","https://access.redhat.com/errata/RHSA-2026:60454","https://access.redhat.com/errata/RHSA-2026:60477","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61314","https://access.redhat.com/errata/RHSA-2026:65126","https://access.redhat.com/errata/RHSA-2026:65964","https://access.redhat.com/errata/RHSA-2026:66022","https://access.redhat.com/errata/RHSA-2026:67450","https://access.redhat.com/security/cve/CVE-2026-39829","https://bugzilla.redhat.com/show_bug.cgi?id=2480681","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39829.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-39829","description":"The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-54874","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-54874","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54874","cwe":"CWE-405","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54874","date":"2026-10-08","epss":0.00622,"percentile":0.48184}],"risk":0.46649999999999997,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-54874","description":"Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires.  Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large amount of memory, which may lead to a Denial of Service.  CWE: CWE-405: Asymmetric Resource Consumption (Amplification)  Description: While a DTLS handshake is in progress, a peer may legitimately have already moved on to the next epoch (for example, having sent its ChangeCipherSpec and Finished messages) before the local endpoint has processed the same transition, typically because of reordering on the underlying UDP transport. OpenSSL buffers such early records so that they can be processed once the local endpoint catches up.  Buffering a record currently retains the entire read buffer it arrived in, which is sized to hold the largest possible DTLS record (around 16 kilobytes), rather than just the bytes that make up the record itself. Up to 100 such records may be buffered per connection. As a result, a peer that sends a stream of small forged records claiming to belong to the next epoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of memory, despite sending only a small fraction of that amount of data over the network.  An attacker therefore gains a memory amplification factor of around 1200, and can multiply the effect across as many associations as it is able to open, making this a remote memory exhaustion Denial of Service risk for DTLS servers. Since the memory retained per connection remains bounded, and any limit an application already places on the number of concurrent associations also bounds the total exposure, this issue has been assessed as Low severity.  FIPS impact: no  No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary.  OpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.  OpenSSL 4.0 users should upgrade to OpenSSL 4.0.2. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.4. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.8. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.7. OpenSSL 3.0 users should upgrade to OpenSSL 3.0.22.  Premium support customers only: OpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi OpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr  This issue was reported on 18 May 2026 by Amazon Web Services. The fix has been developed by Matt Caswell.  -- cut (non-publishing metadata for internal use) -- Reported by: Amazon Web Services Fixed by: Matt Caswell"},"relatedVulnerabilities":[{"id":"CVE-2026-54874","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54874","cwe":"CWE-405","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54874","date":"2026-10-08","epss":0.00622,"percentile":0.48184}],"urls":["https://github.com/openssl/openssl/commit/4808b5d64176451f3d93d87d0ac9c81a9b13fb23","https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://github.com/openssl/openssl/commit/cc0c6710917cd5eec001b297355d2ba723505107","https://github.com/openssl/openssl/commit/f52ffc11b90737ac89083909618dc2e1f42c561c","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54874","description":"Issue summary: Receiving a DTLS record for a future epoch while a handshake\nis in progress causes OpenSSL to buffer far more memory than the record\nitself requires.\n\nImpact summary: A peer can use a small amount of network traffic to make an\nOpenSSL DTLS endpoint retain a disproportionately large amount of memory,\nwhich may lead to a Denial of Service.\n\nCWE: CWE-405: Asymmetric Resource Consumption (Amplification)\n\nDescription: While a DTLS handshake is in progress, a peer may legitimately\nhave already moved on to the next epoch (for example, having sent its\nChangeCipherSpec and Finished messages) before the local endpoint has\nprocessed the same transition, typically because of reordering on the\nunderlying UDP transport. OpenSSL buffers such early records so that they\ncan be processed once the local endpoint catches up.\n\nBuffering a record currently retains the entire read buffer it arrived in,\nwhich is sized to hold the largest possible DTLS record (around 16\nkilobytes), rather than just the bytes that make up the record itself. Up\nto 100 such records may be buffered per connection. As a result, a peer\nthat sends a stream of small forged records claiming to belong to the next\nepoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of\nmemory, despite sending only a small fraction of that amount of data over\nthe network.\n\nAn attacker therefore gains a memory amplification factor of around 1200,\nand can multiply the effect across as many associations as it is able to\nopen, making this a remote memory exhaustion Denial of Service risk for\nDTLS servers. Since the memory retained per connection remains bounded,\nand any limit an application already places on the number of concurrent\nassociations also bounds the total exposure, this issue has been assessed\nas Low severity.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary.\n\nOpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this\nissue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.2.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.4.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.8.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.7.\nOpenSSL 3.0 users should upgrade to OpenSSL 3.0.22.\n\nPremium support customers only:\nOpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi\nOpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr\n\nThis issue was reported on 18 May 2026 by Amazon Web Services.\nThe fix has been developed by Matt Caswell.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Amazon Web Services\nFixed by: Matt Caswell"}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-54874","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-54874","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54874","cwe":"CWE-405","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54874","date":"2026-10-08","epss":0.00622,"percentile":0.48184}],"risk":0.46649999999999997,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-54874","description":"Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires.  Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large amount of memory, which may lead to a Denial of Service.  CWE: CWE-405: Asymmetric Resource Consumption (Amplification)  Description: While a DTLS handshake is in progress, a peer may legitimately have already moved on to the next epoch (for example, having sent its ChangeCipherSpec and Finished messages) before the local endpoint has processed the same transition, typically because of reordering on the underlying UDP transport. OpenSSL buffers such early records so that they can be processed once the local endpoint catches up.  Buffering a record currently retains the entire read buffer it arrived in, which is sized to hold the largest possible DTLS record (around 16 kilobytes), rather than just the bytes that make up the record itself. Up to 100 such records may be buffered per connection. As a result, a peer that sends a stream of small forged records claiming to belong to the next epoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of memory, despite sending only a small fraction of that amount of data over the network.  An attacker therefore gains a memory amplification factor of around 1200, and can multiply the effect across as many associations as it is able to open, making this a remote memory exhaustion Denial of Service risk for DTLS servers. Since the memory retained per connection remains bounded, and any limit an application already places on the number of concurrent associations also bounds the total exposure, this issue has been assessed as Low severity.  FIPS impact: no  No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary.  OpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.  OpenSSL 4.0 users should upgrade to OpenSSL 4.0.2. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.4. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.8. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.7. OpenSSL 3.0 users should upgrade to OpenSSL 3.0.22.  Premium support customers only: OpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi OpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr  This issue was reported on 18 May 2026 by Amazon Web Services. The fix has been developed by Matt Caswell.  -- cut (non-publishing metadata for internal use) -- Reported by: Amazon Web Services Fixed by: Matt Caswell"},"relatedVulnerabilities":[{"id":"CVE-2026-54874","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54874","cwe":"CWE-405","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54874","date":"2026-10-08","epss":0.00622,"percentile":0.48184}],"urls":["https://github.com/openssl/openssl/commit/4808b5d64176451f3d93d87d0ac9c81a9b13fb23","https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://github.com/openssl/openssl/commit/cc0c6710917cd5eec001b297355d2ba723505107","https://github.com/openssl/openssl/commit/f52ffc11b90737ac89083909618dc2e1f42c561c","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54874","description":"Issue summary: Receiving a DTLS record for a future epoch while a handshake\nis in progress causes OpenSSL to buffer far more memory than the record\nitself requires.\n\nImpact summary: A peer can use a small amount of network traffic to make an\nOpenSSL DTLS endpoint retain a disproportionately large amount of memory,\nwhich may lead to a Denial of Service.\n\nCWE: CWE-405: Asymmetric Resource Consumption (Amplification)\n\nDescription: While a DTLS handshake is in progress, a peer may legitimately\nhave already moved on to the next epoch (for example, having sent its\nChangeCipherSpec and Finished messages) before the local endpoint has\nprocessed the same transition, typically because of reordering on the\nunderlying UDP transport. OpenSSL buffers such early records so that they\ncan be processed once the local endpoint catches up.\n\nBuffering a record currently retains the entire read buffer it arrived in,\nwhich is sized to hold the largest possible DTLS record (around 16\nkilobytes), rather than just the bytes that make up the record itself. Up\nto 100 such records may be buffered per connection. As a result, a peer\nthat sends a stream of small forged records claiming to belong to the next\nepoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of\nmemory, despite sending only a small fraction of that amount of data over\nthe network.\n\nAn attacker therefore gains a memory amplification factor of around 1200,\nand can multiply the effect across as many associations as it is able to\nopen, making this a remote memory exhaustion Denial of Service risk for\nDTLS servers. Since the memory retained per connection remains bounded,\nand any limit an application already places on the number of concurrent\nassociations also bounds the total exposure, this issue has been assessed\nas Low severity.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary.\n\nOpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this\nissue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.2.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.4.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.8.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.7.\nOpenSSL 3.0 users should upgrade to OpenSSL 3.0.22.\n\nPremium support customers only:\nOpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi\nOpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr\n\nThis issue was reported on 18 May 2026 by Amazon Web Services.\nThe fix has been developed by Matt Caswell.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Amazon Web Services\nFixed by: Matt Caswell"}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.25.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-4870","versionConstraint":"<1.25.9||>=1.26.0-0,<1.26.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-4870","fix":{"state":"fixed","versions":["1.25.9","1.26.2"],"available":[{"date":"2026-04-07","kind":"release","version":"1.25.9"},{"date":"2026-04-07","kind":"release","version":"1.26.2"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-32283","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-32283","cwe":"CWE-764","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-32283","date":"2026-10-08","epss":0.00621,"percentile":0.48175}],"risk":0.46575,"urls":["https://go.dev/issue/78334","https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/763767","description":"If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service.\n\nThis only affects TLS 1.3."},"relatedVulnerabilities":[{"id":"CVE-2026-32283","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-32283","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-32283","cwe":"CWE-764","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-32283","date":"2026-10-08","epss":0.00621,"percentile":0.48175}],"urls":["https://go.dev/cl/763767","https://go.dev/issue/78334","https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU","https://pkg.go.dev/vuln/GO-2026-4870","https://access.redhat.com/errata/RHSA-2026:10217","https://access.redhat.com/errata/RHSA-2026:10219","https://access.redhat.com/errata/RHSA-2026:10704","https://access.redhat.com/errata/RHSA-2026:11507","https://access.redhat.com/errata/RHSA-2026:11514","https://access.redhat.com/errata/RHSA-2026:11704","https://access.redhat.com/errata/RHSA-2026:11711","https://access.redhat.com/errata/RHSA-2026:11712","https://access.redhat.com/errata/RHSA-2026:11863","https://access.redhat.com/errata/RHSA-2026:11881","https://access.redhat.com/errata/RHSA-2026:14162","https://access.redhat.com/errata/RHSA-2026:14200","https://access.redhat.com/errata/RHSA-2026:14391","https://access.redhat.com/errata/RHSA-2026:15980","https://access.redhat.com/errata/RHSA-2026:16021","https://access.redhat.com/errata/RHSA-2026:16024","https://access.redhat.com/errata/RHSA-2026:16101","https://access.redhat.com/errata/RHSA-2026:16102","https://access.redhat.com/errata/RHSA-2026:16875","https://access.redhat.com/errata/RHSA-2026:17075","https://access.redhat.com/errata/RHSA-2026:17084","https://access.redhat.com/errata/RHSA-2026:17287","https://access.redhat.com/errata/RHSA-2026:18027","https://access.redhat.com/errata/RHSA-2026:18032","https://access.redhat.com/errata/RHSA-2026:19126","https://access.redhat.com/errata/RHSA-2026:19132","https://access.redhat.com/errata/RHSA-2026:19133","https://access.redhat.com/errata/RHSA-2026:19134","https://access.redhat.com/errata/RHSA-2026:19135","https://access.redhat.com/errata/RHSA-2026:19136","https://access.redhat.com/errata/RHSA-2026:19137","https://access.redhat.com/errata/RHSA-2026:19139","https://access.redhat.com/errata/RHSA-2026:19144","https://access.redhat.com/errata/RHSA-2026:19156","https://access.redhat.com/errata/RHSA-2026:19350","https://access.redhat.com/errata/RHSA-2026:19351","https://access.redhat.com/errata/RHSA-2026:19352","https://access.redhat.com/errata/RHSA-2026:19353","https://access.redhat.com/errata/RHSA-2026:19369","https://access.redhat.com/errata/RHSA-2026:19450","https://access.redhat.com/errata/RHSA-2026:19550","https://access.redhat.com/errata/RHSA-2026:19634","https://access.redhat.com/errata/RHSA-2026:19714","https://access.redhat.com/errata/RHSA-2026:19715","https://access.redhat.com/errata/RHSA-2026:19719","https://access.redhat.com/errata/RHSA-2026:19720","https://access.redhat.com/errata/RHSA-2026:19721","https://access.redhat.com/errata/RHSA-2026:19722","https://access.redhat.com/errata/RHSA-2026:19750","https://access.redhat.com/errata/RHSA-2026:19839","https://access.redhat.com/errata/RHSA-2026:20556","https://access.redhat.com/errata/RHSA-2026:20569","https://access.redhat.com/errata/RHSA-2026:20570","https://access.redhat.com/errata/RHSA-2026:20571","https://access.redhat.com/errata/RHSA-2026:20607","https://access.redhat.com/errata/RHSA-2026:20608","https://access.redhat.com/errata/RHSA-2026:20609","https://access.redhat.com/errata/RHSA-2026:21769","https://access.redhat.com/errata/RHSA-2026:22347","https://access.redhat.com/errata/RHSA-2026:22423","https://access.redhat.com/errata/RHSA-2026:22450","https://access.redhat.com/errata/RHSA-2026:22485","https://access.redhat.com/errata/RHSA-2026:22709","https://access.redhat.com/errata/RHSA-2026:22713","https://access.redhat.com/errata/RHSA-2026:22714","https://access.redhat.com/errata/RHSA-2026:22937","https://access.redhat.com/errata/RHSA-2026:23102","https://access.redhat.com/errata/RHSA-2026:23103","https://access.redhat.com/errata/RHSA-2026:23228","https://access.redhat.com/errata/RHSA-2026:23345","https://access.redhat.com/errata/RHSA-2026:24337","https://access.redhat.com/errata/RHSA-2026:24470","https://access.redhat.com/errata/RHSA-2026:24761","https://access.redhat.com/errata/RHSA-2026:24762","https://access.redhat.com/errata/RHSA-2026:25248","https://access.redhat.com/errata/RHSA-2026:25250","https://access.redhat.com/errata/RHSA-2026:25251","https://access.redhat.com/errata/RHSA-2026:25252","https://access.redhat.com/errata/RHSA-2026:26447","https://access.redhat.com/errata/RHSA-2026:26571","https://access.redhat.com/errata/RHSA-2026:26636","https://access.redhat.com/errata/RHSA-2026:27076","https://access.redhat.com/errata/RHSA-2026:28038","https://access.redhat.com/errata/RHSA-2026:28047","https://access.redhat.com/errata/RHSA-2026:28074","https://access.redhat.com/errata/RHSA-2026:29035","https://access.redhat.com/errata/RHSA-2026:29195","https://access.redhat.com/errata/RHSA-2026:29455","https://access.redhat.com/errata/RHSA-2026:29703","https://access.redhat.com/errata/RHSA-2026:33722","https://access.redhat.com/errata/RHSA-2026:34192","https://access.redhat.com/errata/RHSA-2026:34196","https://access.redhat.com/errata/RHSA-2026:34197","https://access.redhat.com/errata/RHSA-2026:34365","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:39810","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:47712","https://access.redhat.com/errata/RHSA-2026:47714","https://access.redhat.com/errata/RHSA-2026:47716","https://access.redhat.com/errata/RHSA-2026:47719","https://access.redhat.com/errata/RHSA-2026:47721","https://access.redhat.com/errata/RHSA-2026:47722","https://access.redhat.com/errata/RHSA-2026:47910","https://access.redhat.com/errata/RHSA-2026:48036","https://access.redhat.com/errata/RHSA-2026:48790","https://access.redhat.com/errata/RHSA-2026:49509","https://access.redhat.com/errata/RHSA-2026:49600","https://access.redhat.com/errata/RHSA-2026:49944","https://access.redhat.com/errata/RHSA-2026:51288","https://access.redhat.com/errata/RHSA-2026:54191","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54757","https://access.redhat.com/errata/RHSA-2026:55898","https://access.redhat.com/errata/RHSA-2026:55900","https://access.redhat.com/errata/RHSA-2026:55901","https://access.redhat.com/errata/RHSA-2026:55902","https://access.redhat.com/errata/RHSA-2026:55903","https://access.redhat.com/errata/RHSA-2026:56910","https://access.redhat.com/errata/RHSA-2026:57409","https://access.redhat.com/errata/RHSA-2026:57801","https://access.redhat.com/errata/RHSA-2026:57802","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:65126","https://access.redhat.com/errata/RHSA-2026:65343","https://access.redhat.com/errata/RHSA-2026:65514","https://access.redhat.com/errata/RHSA-2026:66022","https://access.redhat.com/errata/RHSA-2026:66084","https://access.redhat.com/errata/RHSA-2026:66401","https://access.redhat.com/errata/RHSA-2026:66523","https://access.redhat.com/errata/RHSA-2026:67319","https://access.redhat.com/errata/RHSA-2026:68504","https://access.redhat.com/errata/RHSA-2026:7291","https://access.redhat.com/errata/RHSA-2026:7385","https://access.redhat.com/security/cve/CVE-2026-32283","https://bugzilla.redhat.com/show_bug.cgi?id=2456338","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32283.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-32283","description":"If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.20.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2023-2186","versionConstraint":"<1.20.11||>=1.21.0-0,<1.21.4 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2023-2186","fix":{"state":"fixed","versions":["1.20.11","1.21.4"],"available":[{"date":"2023-11-07","kind":"release","version":"1.20.11"},{"date":"2023-11-07","kind":"release","version":"1.21.4"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-45284","date":"2026-10-08","epss":0.00903,"percentile":0.58534}],"risk":0.46504500000000004,"urls":["https://go.dev/cl/540277","https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY"],"severity":"Medium","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/63713","description":"On Windows, The IsLocal function does not correctly detect reserved device names in some cases.\n\nReserved names followed by spaces, such as \"COM1 \", and reserved names \"COM\" and \"LPT\" followed by superscript 1, 2, or 3, are incorrectly reported as local.\n\nWith fix, IsLocal now correctly reports these names as non-local."},"relatedVulnerabilities":[{"id":"CVE-2023-45284","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-45284","date":"2026-10-08","epss":0.00903,"percentile":0.58534}],"urls":["https://go.dev/cl/540277","https://go.dev/issue/63713","https://groups.google.com/g/golang-announce/c/4tU8LZfBFkY","https://pkg.go.dev/vuln/GO-2023-2186"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-45284","description":"On Windows, The IsLocal function does not correctly detect reserved device names in some cases. Reserved names followed by spaces, such as \"COM1 \", and reserved names \"COM\" and \"LPT\" followed by superscript 1, 2, or 3, are incorrectly reported as local. With fix, IsLocal now correctly reports these names as non-local."}]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.25.10"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-4971","versionConstraint":"<1.25.10||>=1.26.0-0,<1.26.3 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-4971","fix":{"state":"fixed","versions":["1.25.10","1.26.3"],"available":[{"date":"2026-05-07","kind":"release","version":"1.25.10"},{"date":"2026-05-07","kind":"release","version":"1.26.3"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39836","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-39836","date":"2026-10-08","epss":0.0062,"percentile":0.48083}],"risk":0.46499999999999997,"urls":["https://groups.google.com/g/golang-announce/c/qcCIEXso47M","https://go.dev/cl/775320"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/issue/79006","description":"The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)."},"relatedVulnerabilities":[{"id":"CVE-2026-39836","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39836","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-39836","date":"2026-10-08","epss":0.0062,"percentile":0.48083}],"urls":["https://go.dev/cl/775320","https://go.dev/issue/79006","https://groups.google.com/g/golang-announce/c/qcCIEXso47M","https://pkg.go.dev/vuln/GO-2026-4971"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-39836","description":"The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)."}]},{"artifact":{"id":"e974360838add45f","cpes":["cpe:2.3:a:golang:crypto:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*","cpe:2.3:a:go:ssh:v0.0.0-20220411220226-7b82a4e95df4:*:*:*:*:go:*:*"],"name":"golang.org/x/crypto","purl":"pkg:golang/golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4","type":"go-module","version":"v0.0.0-20220411220226-7b82a4e95df4","language":"go","licenses":[],"metadata":{"mainModule":"github.com/git-lfs/git-lfs/v3","architecture":"amd64","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0.52.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q4h4-gmj2-qvw2","versionConstraint":"<0.52.0 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"golang.org/x/crypto","version":"v0.0.0-20220411220226-7b82a4e95df4"},"language":"go","namespace":"github:language:go"}}],"vulnerability":{"id":"GHSA-q4h4-gmj2-qvw2","fix":{"state":"fixed","versions":["0.52.0"],"available":[{"date":"2026-07-07","kind":"first-observed","version":"0.52.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46597","cwe":"CWE-704","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-46597","date":"2026-10-08","epss":0.0062,"percentile":0.48082}],"risk":0.46499999999999997,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-46597","https://go.dev/cl/781620","https://go.dev/issue/79561","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5013"],"severity":"High","namespace":"github:language:go","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q4h4-gmj2-qvw2","description":"golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic"},"relatedVulnerabilities":[{"id":"CVE-2026-46597","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46597","cwe":"CWE-704","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-46597","date":"2026-10-08","epss":0.0062,"percentile":0.48082}],"urls":["https://go.dev/cl/781620","https://go.dev/issue/79561","https://groups.google.com/g/golang-announce/c/a082jnz-LvI","https://pkg.go.dev/vuln/GO-2026-5013"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46597","description":"An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs."}]},{"artifact":{"id":"e67c3b95768c68d0","cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*","cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:generic/python@3.11.3","type":"binary","version":"3.11.3","language":"","licenses":[],"locations":[{"path":"/tmp/aws/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/tmp/aws/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}},{"path":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/usr/local/aws-cli/v2/2.11.25/dist/libpython3.11.so.1.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-7774","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}},{"fix":{"suggestedVersion":"3.11.16"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-7774","versionConstraint":"< 3.10.21||>= 3.11.0, < 3.11.16||>= 3.12.0, < 3.12.14||>= 3.13.0, < 3.13.14||>= 3.14.0, < 3.14.6||>= 3.15.0a1, < 3.15.0b2 (unknown)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:python_software_foundation:python:3.11.3:*:*:*:*:*:*:*"],"package":{"name":"python","version":"3.11.3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-7774","fix":{"state":"fixed","versions":["3.10.21","3.11.16","3.12.14","3.13.14","3.14.6","3.15.0b2"],"available":[{"date":"2026-09-22","kind":"first-observed","version":"3.10.21"},{"date":"2026-09-22","kind":"first-observed","version":"3.11.16"},{"date":"2026-09-22","kind":"first-observed","version":"3.12.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.13.14"},{"date":"2026-09-22","kind":"first-observed","version":"3.14.6"},{"date":"2026-09-22","kind":"first-observed","version":"3.15.0b2"},{"date":"2026-08-19","kind":"first-observed","version":"3.10.21"},{"date":"2026-08-19","kind":"first-observed","version":"3.11.16"},{"date":"2026-08-19","kind":"first-observed","version":"3.12.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.13.14"},{"date":"2026-06-18","kind":"first-observed","version":"3.14.6"},{"date":"2026-06-05","kind":"first-observed","version":"3.15.0b2"}]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7774","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7774","date":"2026-10-08","epss":0.00781,"percentile":0.54586}],"risk":0.46469499999999997,"urls":["https://github.com/python/cpython/commit/0478bd83d82b255e0f29f613367a59d261e7eaa2","https://github.com/python/cpython/commit/0d28f5e46e151718972dfabd91205444d0037b6d","https://github.com/python/cpython/commit/10a13bee3c24f9c62b602e696334ff2272a40efc","https://github.com/python/cpython/commit/578411982c16f753f4893532510099ef665117da","https://github.com/python/cpython/commit/5cf47a248c35c375d610b87b2f72fd1ed454b558","https://github.com/python/cpython/commit/74cca9a92fb7d653e404843a56b8bdc7b0afdbbf","https://github.com/python/cpython/commit/c063191cb7f9170f9565e305f8aa2b79ab2bf609","https://github.com/python/cpython/issues/149486","https://github.com/python/cpython/pull/149487","https://mail.python.org/archives/list/security-announce@python.org/thread/4FU62L2M6RMMHT2QPGQNPEHHUND7CEX5/","http://www.openwall.com/lists/oss-security/2026/06/04/9"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7774","description":"tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination directory, subject to the permissions of the extracting process."},"relatedVulnerabilities":[]},{"artifact":{"id":"c3466eb679e28aa6","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:8.4p1-5\\+deb11u1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A8.4p1-5%2Bdeb11u1?arch=amd64&distro=debian-11.7&upstream=openssh","type":"deb","version":"1:8.4p1-5+deb11u1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Beer-ware","Expat-with-advertising-restriction","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-client/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-60000","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssh","version":"1:8.4p1-5+deb11u1"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-60000","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-60000","cwe":"CWE-770","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-60000","date":"2026-10-08","epss":0.00618,"percentile":0.47997}],"risk":0.4635,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-60000","description":"sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication."},"relatedVulnerabilities":[{"id":"CVE-2026-60000","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-60000","cwe":"CWE-770","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-60000","date":"2026-10-08","epss":0.00618,"percentile":0.47997}],"urls":["https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2","https://www.openssh.org/releasenotes.html#10.4p1","https://www.openwall.com/lists/oss-security/2026/07/06/5"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-60000","description":"sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication."}]},{"artifact":{"id":"b1b865057b4a53ab","cpes":["cpe:2.3:a:libsystemd0:libsystemd0:247.3-7\\+deb11u2:*:*:*:*:*:*:*"],"name":"libsystemd0","purl":"pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=systemd","type":"deb","version":"247.3-7+deb11u2","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsystemd0/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libsystemd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"fix":{"suggestedVersion":"247.3-7+deb11u6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-7008","versionConstraint":"< 247.3-7+deb11u6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"systemd","version":"247.3-7+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-7008","fix":{"state":"fixed","versions":["247.3-7+deb11u6"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"247.3-7+deb11u6"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-7008","cwe":"CWE-300","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-7008","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-7008","date":"2026-10-08","epss":0.00849,"percentile":0.56847}],"risk":0.462705,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-7008","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records."},"relatedVulnerabilities":[{"id":"CVE-2023-7008","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-7008","cwe":"CWE-300","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-7008","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-7008","date":"2026-10-08","epss":0.00849,"percentile":0.56847}],"urls":["https://access.redhat.com/errata/RHSA-2024:2463","https://access.redhat.com/errata/RHSA-2024:3203","https://access.redhat.com/security/cve/CVE-2023-7008","https://bugzilla.redhat.com/show_bug.cgi?id=2222261","https://bugzilla.redhat.com/show_bug.cgi?id=2222672","https://github.com/systemd/systemd/issues/25676","https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/","https://security.netapp.com/advisory/ntap-20241122-0004/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-7008","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records."}]},{"artifact":{"id":"7eda2e8b2cc08c93","cpes":["cpe:2.3:a:libudev1:libudev1:247.3-7\\+deb11u2:*:*:*:*:*:*:*"],"name":"libudev1","purl":"pkg:deb/debian/libudev1@247.3-7%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=systemd","type":"deb","version":"247.3-7+deb11u2","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libudev1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libudev1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libudev1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libudev1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"fix":{"suggestedVersion":"247.3-7+deb11u6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-7008","versionConstraint":"< 247.3-7+deb11u6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"systemd","version":"247.3-7+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2023-7008","fix":{"state":"fixed","versions":["247.3-7+deb11u6"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"247.3-7+deb11u6"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-7008","cwe":"CWE-300","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-7008","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-7008","date":"2026-10-08","epss":0.00849,"percentile":0.56847}],"risk":0.462705,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-7008","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records."},"relatedVulnerabilities":[{"id":"CVE-2023-7008","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-7008","cwe":"CWE-300","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-7008","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-7008","date":"2026-10-08","epss":0.00849,"percentile":0.56847}],"urls":["https://access.redhat.com/errata/RHSA-2024:2463","https://access.redhat.com/errata/RHSA-2024:3203","https://access.redhat.com/security/cve/CVE-2023-7008","https://bugzilla.redhat.com/show_bug.cgi?id=2222261","https://bugzilla.redhat.com/show_bug.cgi?id=2222672","https://github.com/systemd/systemd/issues/25676","https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/","https://security.netapp.com/advisory/ntap-20241122-0004/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-7008","description":"A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.28"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-50059","versionConstraint":">= 12, < 17.0.16||>= 18, < 21.0.8||>= 22, < 24.0.2||>= 9, < 11.0.28 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-50059","fix":{"state":"fixed","versions":["11.0.28","17.0.16","21.0.8","24.0.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"17.0.16"},{"date":"2025-09-04","kind":"first-observed","version":"21.0.8"},{"date":"2025-09-04","kind":"first-observed","version":"24.0.2"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.28"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":8.6,"impactScore":4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-50059","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-50059","date":"2026-10-08","epss":0.00573,"percentile":0.456}],"risk":0.4612649999999999,"urls":["https://www.oracle.com/security-alerts/cpujul2025.html","https://lists.debian.org/debian-lts-announce/2025/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00014.html"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-50059","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"b66c2b277b3e688d","cpes":["cpe:2.3:a:golang:go:1.19.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.19.3","type":"go-module","version":"go1.19.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.19.3"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:c691f2bd46c5efb4de3677c7664b5bd7c271da5cc9d55833fa6c1f83ed2f7809","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.25.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-4947","versionConstraint":"<1.25.9||>=1.26.0-0,<1.26.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.19.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-4947","fix":{"state":"fixed","versions":["1.25.9","1.26.2"],"available":[{"date":"2026-04-07","kind":"release","version":"1.25.9"},{"date":"2026-04-07","kind":"release","version":"1.26.2"}]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-32280","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-32280","cwe":"CWE-770","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-32280","date":"2026-10-08","epss":0.00615,"percentile":0.47829}],"risk":0.46125000000000005,"urls":["https://go.dev/issue/78282","https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/758320","description":"During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls."},"relatedVulnerabilities":[{"id":"CVE-2026-32280","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-32280","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-32280","cwe":"CWE-770","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-32280","date":"2026-10-08","epss":0.00615,"percentile":0.47829}],"urls":["https://go.dev/cl/758320","https://go.dev/issue/78282","https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU","https://pkg.go.dev/vuln/GO-2026-4947","https://access.redhat.com/errata/RHSA-2026:10217","https://access.redhat.com/errata/RHSA-2026:10219","https://access.redhat.com/errata/RHSA-2026:10704","https://access.redhat.com/errata/RHSA-2026:11507","https://access.redhat.com/errata/RHSA-2026:11514","https://access.redhat.com/errata/RHSA-2026:11688","https://access.redhat.com/errata/RHSA-2026:13545","https://access.redhat.com/errata/RHSA-2026:13791","https://access.redhat.com/errata/RHSA-2026:13826","https://access.redhat.com/errata/RHSA-2026:13829","https://access.redhat.com/errata/RHSA-2026:14020","https://access.redhat.com/errata/RHSA-2026:14162","https://access.redhat.com/errata/RHSA-2026:14200","https://access.redhat.com/errata/RHSA-2026:14391","https://access.redhat.com/errata/RHSA-2026:15980","https://access.redhat.com/errata/RHSA-2026:16021","https://access.redhat.com/errata/RHSA-2026:16024","https://access.redhat.com/errata/RHSA-2026:16101","https://access.redhat.com/errata/RHSA-2026:16476","https://access.redhat.com/errata/RHSA-2026:16477","https://access.redhat.com/errata/RHSA-2026:16505","https://access.redhat.com/errata/RHSA-2026:16508","https://access.redhat.com/errata/RHSA-2026:16532","https://access.redhat.com/errata/RHSA-2026:16534","https://access.redhat.com/errata/RHSA-2026:16535","https://access.redhat.com/errata/RHSA-2026:16537","https://access.redhat.com/errata/RHSA-2026:16542","https://access.redhat.com/errata/RHSA-2026:16874","https://access.redhat.com/errata/RHSA-2026:16875","https://access.redhat.com/errata/RHSA-2026:17084","https://access.redhat.com/errata/RHSA-2026:17287","https://access.redhat.com/errata/RHSA-2026:18027","https://access.redhat.com/errata/RHSA-2026:18032","https://access.redhat.com/errata/RHSA-2026:19133","https://access.redhat.com/errata/RHSA-2026:19135","https://access.redhat.com/errata/RHSA-2026:19144","https://access.redhat.com/errata/RHSA-2026:19350","https://access.redhat.com/errata/RHSA-2026:19353","https://access.redhat.com/errata/RHSA-2026:19375","https://access.redhat.com/errata/RHSA-2026:19450","https://access.redhat.com/errata/RHSA-2026:19550","https://access.redhat.com/errata/RHSA-2026:19634","https://access.redhat.com/errata/RHSA-2026:19714","https://access.redhat.com/errata/RHSA-2026:19715","https://access.redhat.com/errata/RHSA-2026:19719","https://access.redhat.com/errata/RHSA-2026:19720","https://access.redhat.com/errata/RHSA-2026:19721","https://access.redhat.com/errata/RHSA-2026:19722","https://access.redhat.com/errata/RHSA-2026:19750","https://access.redhat.com/errata/RHSA-2026:19839","https://access.redhat.com/errata/RHSA-2026:20556","https://access.redhat.com/errata/RHSA-2026:20569","https://access.redhat.com/errata/RHSA-2026:20570","https://access.redhat.com/errata/RHSA-2026:20571","https://access.redhat.com/errata/RHSA-2026:20607","https://access.redhat.com/errata/RHSA-2026:20608","https://access.redhat.com/errata/RHSA-2026:20609","https://access.redhat.com/errata/RHSA-2026:20889","https://access.redhat.com/errata/RHSA-2026:21017","https://access.redhat.com/errata/RHSA-2026:21338","https://access.redhat.com/errata/RHSA-2026:21655","https://access.redhat.com/errata/RHSA-2026:21769","https://access.redhat.com/errata/RHSA-2026:21772","https://access.redhat.com/errata/RHSA-2026:22130","https://access.redhat.com/errata/RHSA-2026:22141","https://access.redhat.com/errata/RHSA-2026:22258","https://access.redhat.com/errata/RHSA-2026:22260","https://access.redhat.com/errata/RHSA-2026:22268","https://access.redhat.com/errata/RHSA-2026:22309","https://access.redhat.com/errata/RHSA-2026:22347","https://access.redhat.com/errata/RHSA-2026:22415","https://access.redhat.com/errata/RHSA-2026:22422","https://access.redhat.com/errata/RHSA-2026:22465","https://access.redhat.com/errata/RHSA-2026:22485","https://access.redhat.com/errata/RHSA-2026:22709","https://access.redhat.com/errata/RHSA-2026:22713","https://access.redhat.com/errata/RHSA-2026:22840","https://access.redhat.com/errata/RHSA-2026:22862","https://access.redhat.com/errata/RHSA-2026:22958","https://access.redhat.com/errata/RHSA-2026:22959","https://access.redhat.com/errata/RHSA-2026:22960","https://access.redhat.com/errata/RHSA-2026:22961","https://access.redhat.com/errata/RHSA-2026:22962","https://access.redhat.com/errata/RHSA-2026:23102","https://access.redhat.com/errata/RHSA-2026:23103","https://access.redhat.com/errata/RHSA-2026:23244","https://access.redhat.com/errata/RHSA-2026:23345","https://access.redhat.com/errata/RHSA-2026:23361","https://access.redhat.com/errata/RHSA-2026:24337","https://access.redhat.com/errata/RHSA-2026:24359","https://access.redhat.com/errata/RHSA-2026:24470","https://access.redhat.com/errata/RHSA-2026:24478","https://access.redhat.com/errata/RHSA-2026:24716","https://access.redhat.com/errata/RHSA-2026:24761","https://access.redhat.com/errata/RHSA-2026:24762","https://access.redhat.com/errata/RHSA-2026:24853","https://access.redhat.com/errata/RHSA-2026:24977","https://access.redhat.com/errata/RHSA-2026:25089","https://access.redhat.com/errata/RHSA-2026:25127","https://access.redhat.com/errata/RHSA-2026:25180","https://access.redhat.com/errata/RHSA-2026:25248","https://access.redhat.com/errata/RHSA-2026:25250","https://access.redhat.com/errata/RHSA-2026:25251","https://access.redhat.com/errata/RHSA-2026:25252","https://access.redhat.com/errata/RHSA-2026:25253","https://access.redhat.com/errata/RHSA-2026:26447","https://access.redhat.com/errata/RHSA-2026:26568","https://access.redhat.com/errata/RHSA-2026:26571","https://access.redhat.com/errata/RHSA-2026:26585","https://access.redhat.com/errata/RHSA-2026:26636","https://access.redhat.com/errata/RHSA-2026:27076","https://access.redhat.com/errata/RHSA-2026:28038","https://access.redhat.com/errata/RHSA-2026:28047","https://access.redhat.com/errata/RHSA-2026:28074","https://access.redhat.com/errata/RHSA-2026:28196","https://access.redhat.com/errata/RHSA-2026:28198","https://access.redhat.com/errata/RHSA-2026:28441","https://access.redhat.com/errata/RHSA-2026:28886","https://access.redhat.com/errata/RHSA-2026:28961","https://access.redhat.com/errata/RHSA-2026:29035","https://access.redhat.com/errata/RHSA-2026:29195","https://access.redhat.com/errata/RHSA-2026:29455","https://access.redhat.com/errata/RHSA-2026:29702","https://access.redhat.com/errata/RHSA-2026:29703","https://access.redhat.com/errata/RHSA-2026:29854","https://access.redhat.com/errata/RHSA-2026:33722","https://access.redhat.com/errata/RHSA-2026:34097","https://access.redhat.com/errata/RHSA-2026:34192","https://access.redhat.com/errata/RHSA-2026:34196","https://access.redhat.com/errata/RHSA-2026:34197","https://access.redhat.com/errata/RHSA-2026:34365","https://access.redhat.com/errata/RHSA-2026:36319","https://access.redhat.com/errata/RHSA-2026:36625","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:39810","https://access.redhat.com/errata/RHSA-2026:39894","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:41019","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:42043","https://access.redhat.com/errata/RHSA-2026:42047","https://access.redhat.com/errata/RHSA-2026:42049","https://access.redhat.com/errata/RHSA-2026:42050","https://access.redhat.com/errata/RHSA-2026:42051","https://access.redhat.com/errata/RHSA-2026:47712","https://access.redhat.com/errata/RHSA-2026:47714","https://access.redhat.com/errata/RHSA-2026:47716","https://access.redhat.com/errata/RHSA-2026:47719","https://access.redhat.com/errata/RHSA-2026:47721","https://access.redhat.com/errata/RHSA-2026:47722","https://access.redhat.com/errata/RHSA-2026:47910","https://access.redhat.com/errata/RHSA-2026:47952","https://access.redhat.com/errata/RHSA-2026:48036","https://access.redhat.com/errata/RHSA-2026:48790","https://access.redhat.com/errata/RHSA-2026:49509","https://access.redhat.com/errata/RHSA-2026:49526","https://access.redhat.com/errata/RHSA-2026:49600","https://access.redhat.com/errata/RHSA-2026:49838","https://access.redhat.com/errata/RHSA-2026:49944","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:51288","https://access.redhat.com/errata/RHSA-2026:54191","https://access.redhat.com/errata/RHSA-2026:54603","https://access.redhat.com/errata/RHSA-2026:54757","https://access.redhat.com/errata/RHSA-2026:56785","https://access.redhat.com/errata/RHSA-2026:56789","https://access.redhat.com/errata/RHSA-2026:56852","https://access.redhat.com/errata/RHSA-2026:56855","https://access.redhat.com/errata/RHSA-2026:56910","https://access.redhat.com/errata/RHSA-2026:56912","https://access.redhat.com/errata/RHSA-2026:56913","https://access.redhat.com/errata/RHSA-2026:57409","https://access.redhat.com/errata/RHSA-2026:57482","https://access.redhat.com/errata/RHSA-2026:57488","https://access.redhat.com/errata/RHSA-2026:59830","https://access.redhat.com/errata/RHSA-2026:59833","https://access.redhat.com/errata/RHSA-2026:59834","https://access.redhat.com/errata/RHSA-2026:60018","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:61685","https://access.redhat.com/errata/RHSA-2026:61906","https://access.redhat.com/errata/RHSA-2026:61907","https://access.redhat.com/errata/RHSA-2026:65534","https://access.redhat.com/errata/RHSA-2026:65838","https://access.redhat.com/errata/RHSA-2026:65886","https://access.redhat.com/errata/RHSA-2026:66401","https://access.redhat.com/errata/RHSA-2026:67319","https://access.redhat.com/errata/RHSA-2026:68504","https://access.redhat.com/errata/RHSA-2026:9385","https://access.redhat.com/security/cve/CVE-2026-32280","https://bugzilla.redhat.com/show_bug.cgi?id=2456339","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-32280","description":"During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service. This affects both direct users of crypto/x509 and users of crypto/tls."}]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.24"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-21140","versionConstraint":"< 1.8.0_422||>= 1.9, < 8.0.422||>= 12, < 17.0.12||>= 18, < 21.0.4||>= 22, < 22.0.2||>= 9, < 11.0.24 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-21140","fix":{"state":"fixed","versions":["1.8.0_422","8.0.422","11.0.24","17.0.12","21.0.4","22.0.2"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_422"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.422"},{"date":"2025-09-04","kind":"first-observed","version":"17.0.12"},{"date":"2025-09-04","kind":"first-observed","version":"21.0.4"},{"date":"2025-09-04","kind":"first-observed","version":"22.0.2"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.24"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21140","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21140","date":"2026-10-08","epss":0.0094,"percentile":0.59747}],"risk":0.4606,"urls":["https://security.netapp.com/advisory/ntap-20240719-0008/","https://www.oracle.com/security-alerts/cpujul2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-07-16"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21140","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"c10575ceffc87881","cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"name":"openjdk","purl":"pkg:generic/oracle/openjdk@11.0.19","type":"binary","version":"11.0.19","language":"","licenses":[],"metadata":{"release":{"javaVersion":"11.0.19"}},"locations":[{"path":"/opt/java/openjdk/release","layerID":"sha256:681651416c6b466c495572ad23979c19dcb1d7b3b6eb5ed509be62277894515b","accessPath":"/opt/java/openjdk/release"}],"upstreams":[],"metadataType":"JavaVMInstallationMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"11.0.23"},"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2024-21011","versionConstraint":"< 1.8.0_412||>= 1.9, < 8.0.412||>= 12, < 17.0.11||>= 18, < 21.0.3||>= 22, < 22.0.1||>= 9, < 11.0.23 (jvm)"},"matcher":"stock-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.19:*:*:*:*:*:*:*"],"package":{"name":"openjdk","version":"11.0.19"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2024-21011","fix":{"state":"fixed","versions":["1.8.0_412","8.0.412","11.0.23","17.0.11","21.0.3","22.0.1"],"available":[{"date":"2025-09-04","kind":"first-observed","version":"1.8.0_412"},{"date":"2025-09-04","kind":"first-observed","version":"8.0.412"},{"date":"2025-09-04","kind":"first-observed","version":"17.0.11"},{"date":"2025-09-04","kind":"first-observed","version":"21.0.3"},{"date":"2025-09-04","kind":"first-observed","version":"22.0.1"},{"date":"2025-09-04","kind":"first-observed","version":"11.0.23"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21011","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21011","date":"2026-10-08","epss":0.01372,"percentile":0.7112}],"risk":0.4596199999999999,"urls":["https://lists.debian.org/debian-lts-announce/2024/04/msg00014.html","https://security.netapp.com/advisory/ntap-20240426-0004/","https://www.oracle.com/security-alerts/cpuapr2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-04-16"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21011","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."},"relatedVulnerabilities":[]},{"artifact":{"id":"34627179644c3f1c","cpes":["cpe:2.3:a:com.sun.mail.jakarta.mail:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun.mail.jakarta.mail:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun.mail.jakarta.mail:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun.mail:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:jakarta.mail:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun.mail:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:jakarta.mail:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:jakarta:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun.mail:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:jakarta.mail:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mail:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:sun:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:jakarta:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:jakarta:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mail:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:sun:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mail:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:sun:mail:2.0.1:*:*:*:*:*:*:*"],"name":"jakarta.mail","purl":"pkg:maven/com.sun.mail/jakarta.mail@2.0.1","type":"java-archive","version":"2.0.1","language":"java","licenses":["http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html, http://www.eclipse.org/org/documents/edl-v10.php"],"metadata":{"pomGroupID":"com.sun.mail","virtualPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jakarta-mail-api.hpi:WEB-INF/lib/jakarta.mail-2.0.1.jar","manifestName":"","pomArtifactID":"jakarta.mail","archiveDigests":[{"value":"96d3645f02a92bcc5e7ae1ff037151e44179f230","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/jenkins.war","layerID":"sha256:5e27190b545466f4e20c159c8e8a03346d58d5b30f13afd79b992d4ecdd51f39","accessPath":"/usr/share/jenkins/jenkins.war:WEB-INF/detached-plugins/jakarta-mail-api.hpi:WEB-INF/lib/jakarta.mail-2.0.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.0.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9342-92gg-6v29","versionConstraint":">=2.0.0,<2.0.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.sun.mail:jakarta.mail","version":"2.0.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-9342-92gg-6v29","fix":{"state":"fixed","versions":["2.0.2"],"available":[{"date":"2026-04-17","kind":"first-observed","version":"2.0.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-7962","cwe":"CWE-147","type":"Secondary","source":"emo@eclipse.org"}],"epss":[{"cve":"CVE-2025-7962","date":"2026-10-08","epss":0.00782,"percentile":0.54619}],"risk":0.45942500000000003,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-7962","https://gitlab.eclipse.org/security/cve-assignement/-/issues/67","https://github.com/eclipse-ee4j/angus-mail/commit/269099b652a0a5c2fa140f1296a18f0fbbea0d44","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290","http://www.openwall.com/lists/oss-security/2025/09/03/4","https://github.com/jakartaee/mail-api/issues/765","https://github.com/jakartaee/mail-api/pull/760","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290#note_5320539"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9342-92gg-6v29","description":"Jakarta Mail vulnerable to SMTP Injection"},"relatedVulnerabilities":[{"id":"CVE-2025-7962","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-7962","cwe":"CWE-147","type":"Secondary","source":"emo@eclipse.org"}],"epss":[{"cve":"CVE-2025-7962","date":"2026-10-08","epss":0.00782,"percentile":0.54619}],"urls":["https://gitlab.eclipse.org/security/cve-assignement/-/issues/67","http://www.openwall.com/lists/oss-security/2025/09/03/4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-7962","description":"In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \\r and \\n UTF-8 characters to separate different messages."}]},{"artifact":{"id":"dfea9782f3c0191d","cpes":["cpe:2.3:a:com.sun.mail.jakarta.mail:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun.mail.jakarta.mail:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun.mail.jakarta.mail:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun.mail:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:jakarta.mail:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun.mail:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:jakarta.mail:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:jakarta:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun.mail:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:jakarta.mail:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mail:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:sun:jakarta.mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:jakarta:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:com.sun:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:jakarta:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mail:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:sun:jakarta:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mail:mail:2.0.1:*:*:*:*:*:*:*","cpe:2.3:a:sun:mail:2.0.1:*:*:*:*:*:*:*"],"name":"jakarta.mail","purl":"pkg:maven/com.sun.mail/jakarta.mail@2.0.1","type":"java-archive","version":"2.0.1","language":"java","licenses":["http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html, http://www.eclipse.org/org/documents/edl-v10.php"],"metadata":{"pomGroupID":"com.sun.mail","virtualPath":"/usr/share/jenkins/ref/plugins/jakarta-mail-api.jpi:WEB-INF/lib/jakarta.mail-2.0.1.jar","manifestName":"","pomArtifactID":"jakarta.mail","archiveDigests":[{"value":"96d3645f02a92bcc5e7ae1ff037151e44179f230","algorithm":"sha1"}]},"locations":[{"path":"/usr/share/jenkins/ref/plugins/jakarta-mail-api.jpi","layerID":"sha256:dbd4ebd9ef70c5455f5dd29825d4bfcc39abef0cbbb69c682797f102614b79e0","accessPath":"/usr/share/jenkins/ref/plugins/jakarta-mail-api.jpi:WEB-INF/lib/jakarta.mail-2.0.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.0.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9342-92gg-6v29","versionConstraint":">=2.0.0,<2.0.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.sun.mail:jakarta.mail","version":"2.0.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-9342-92gg-6v29","fix":{"state":"fixed","versions":["2.0.2"],"available":[{"date":"2026-04-17","kind":"first-observed","version":"2.0.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-7962","cwe":"CWE-147","type":"Secondary","source":"emo@eclipse.org"}],"epss":[{"cve":"CVE-2025-7962","date":"2026-10-08","epss":0.00782,"percentile":0.54619}],"risk":0.45942500000000003,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-7962","https://gitlab.eclipse.org/security/cve-assignement/-/issues/67","https://github.com/eclipse-ee4j/angus-mail/commit/269099b652a0a5c2fa140f1296a18f0fbbea0d44","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290","http://www.openwall.com/lists/oss-security/2025/09/03/4","https://github.com/jakartaee/mail-api/issues/765","https://github.com/jakartaee/mail-api/pull/760","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/290#note_5320539"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9342-92gg-6v29","description":"Jakarta Mail vulnerable to SMTP Injection"},"relatedVulnerabilities":[{"id":"CVE-2025-7962","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-7962","cwe":"CWE-147","type":"Secondary","source":"emo@eclipse.org"}],"epss":[{"cve":"CVE-2025-7962","date":"2026-10-08","epss":0.00782,"percentile":0.54619}],"urls":["https://gitlab.eclipse.org/security/cve-assignement/-/issues/67","http://www.openwall.com/lists/oss-security/2025/09/03/4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-7962","description":"In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \\r and \\n UTF-8 characters to separate different messages."}]},{"artifact":{"id":"f31fc582b5f18593","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7&upstream=openssl","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-69419","versionConstraint":"< 1.1.1w-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-69419","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u5"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u5"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69419","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69419","date":"2026-10-08","epss":0.00616,"percentile":0.47921}],"risk":0.45892,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-69419","description":"Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer.  Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service.  The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer.  The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.  OpenSSL 1.0.2 is not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2025-69419","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69419","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69419","date":"2026-10-08","epss":0.00616,"percentile":0.47921}],"urls":["https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296","https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb","https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2","https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015","https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69419","description":"Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."}]},{"artifact":{"id":"d00524b433973a80","cpes":["cpe:2.3:a:openssl:openssl:1.1.1n-0\\+deb11u4:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u4?arch=amd64&distro=debian-11.7","type":"deb","version":"1.1.1n-0+deb11u4","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1w-0+deb11u5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-69419","versionConstraint":"< 1.1.1w-0+deb11u5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"openssl","version":"1.1.1n-0+deb11u4"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2025-69419","fix":{"state":"fixed","versions":["1.1.1w-0+deb11u5"],"available":[{"date":"2026-02-27","kind":"first-observed","version":"1.1.1w-0+deb11u5"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69419","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69419","date":"2026-10-08","epss":0.00616,"percentile":0.47921}],"risk":0.45892,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-69419","description":"Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer.  Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service.  The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer.  The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy.  The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.  OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.  OpenSSL 1.0.2 is not affected by this issue."},"relatedVulnerabilities":[{"id":"CVE-2025-69419","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69419","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69419","date":"2026-10-08","epss":0.00616,"percentile":0.47921}],"urls":["https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296","https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb","https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2","https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015","https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69419","description":"Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."}]},{"artifact":{"id":"2a88897c46c4751f","cpes":["cpe:2.3:a:libperl5.32:libperl5.32:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"libperl5.32","purl":"pkg:deb/debian/libperl5.32@5.32.1-4%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=perl","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libperl5.32/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/libperl5.32/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libperl5.32:amd64.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/libperl5.32:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-48959","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-48959","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48959","cwe":"CWE-407","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48959","date":"2026-10-08","epss":0.00609,"percentile":0.47546}],"risk":0.45675000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-48959","description":"IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward.  fastForward() compares length $offset (the digit count of the offset, 1 to 19) against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes per iteration.  Extracting a named entry from an attacker supplied zip via IO::Uncompress::Unzip->new($zip, Name => $target) drives a per-byte read loop scaling with the entry's compressed size, up to the non-Zip64 4 GiB cap."},"relatedVulnerabilities":[{"id":"CVE-2026-48959","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48959","cwe":"CWE-407","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48959","date":"2026-10-08","epss":0.00609,"percentile":0.47546}],"urls":["https://github.com/pmqs/IO-Compress/commit/68db44076f4c1a86a2ffe53a958eac6cabaf72e2.patch","https://metacpan.org/release/PMQS/IO-Compress-2.220/changes","http://www.openwall.com/lists/oss-security/2026/05/27/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48959","description":"IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward.\n\nfastForward() compares length $offset (the digit count of the offset, 1 to 19) against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes per iteration.\n\nExtracting a named entry from an attacker supplied zip via IO::Uncompress::Unzip->new($zip, Name => $target) drives a per-byte read loop scaling with the entry's compressed size, up to the non-Zip64 4 GiB cap."}]},{"artifact":{"id":"ca766af4b1156087","cpes":["cpe:2.3:a:perl:perl:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"perl","purl":"pkg:deb/debian/perl@5.32.1-4%2Bdeb11u2?arch=amd64&distro=debian-11.7","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl/copyright","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/usr/share/doc/perl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.conffiles","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.md5sums","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.list","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.list"},{"path":"/var/lib/dpkg/info/perl.postinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.postinst"},{"path":"/var/lib/dpkg/info/perl.postrm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.postrm"},{"path":"/var/lib/dpkg/info/perl.preinst","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.preinst"},{"path":"/var/lib/dpkg/info/perl.prerm","layerID":"sha256:8164f85dde31a75377450777accd9f957ef03e136e0e0dc2d0c24fc850287db1","accessPath":"/var/lib/dpkg/info/perl.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-48959","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-48959","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48959","cwe":"CWE-407","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48959","date":"2026-10-08","epss":0.00609,"percentile":0.47546}],"risk":0.45675000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-48959","description":"IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward.  fastForward() compares length $offset (the digit count of the offset, 1 to 19) against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes per iteration.  Extracting a named entry from an attacker supplied zip via IO::Uncompress::Unzip->new($zip, Name => $target) drives a per-byte read loop scaling with the entry's compressed size, up to the non-Zip64 4 GiB cap."},"relatedVulnerabilities":[{"id":"CVE-2026-48959","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48959","cwe":"CWE-407","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48959","date":"2026-10-08","epss":0.00609,"percentile":0.47546}],"urls":["https://github.com/pmqs/IO-Compress/commit/68db44076f4c1a86a2ffe53a958eac6cabaf72e2.patch","https://metacpan.org/release/PMQS/IO-Compress-2.220/changes","http://www.openwall.com/lists/oss-security/2026/05/27/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48959","description":"IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward.\n\nfastForward() compares length $offset (the digit count of the offset, 1 to 19) against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes per iteration.\n\nExtracting a named entry from an attacker supplied zip via IO::Uncompress::Unzip->new($zip, Name => $target) drives a per-byte read loop scaling with the entry's compressed size, up to the non-Zip64 4 GiB cap."}]},{"artifact":{"id":"0132d68bd1bdb220","cpes":["cpe:2.3:a:perl-base:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.32.1-4\\+deb11u2:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u2?arch=amd64&distro=debian-11.7&upstream=perl","type":"deb","version":"5.32.1-4+deb11u2","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:4f428788a94486343c42fb165cae3cf0a76fdd30cfa6388aae246f73583af72b","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:974e52a24adf98b37b8895f61b8d8d273b73a8596b80da491342936fa1751541","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-48959","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"11.7"},"package":{"name":"perl","version":"5.32.1-4+deb11u2"},"namespace":"debian:distro:debian:11"}}],"vulnerability":{"id":"CVE-2026-48959","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48959","cwe":"CWE-407","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48959","date":"2026-10-08","epss":0.00609,"percentile":0.47546}],"risk":0.45675000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:11","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-48959","description":"IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward.  fastForward() compares length $offset (the digit count of the offset, 1 to 19) against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes per iteration.  Extracting a named entry from an attacker supplied zip via IO::Uncompress::Unzip->new($zip, Name => $target) drives a per-byte read loop scaling with the entry's compressed size, up to the non-Zip64 4 GiB cap."},"relatedVulnerabilities":[{"id":"CVE-2026-48959","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48959","cwe":"CWE-407","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48959","date":"2026-10-08","epss":0.00609,"percentile":0.47546}],"urls":["https://github.com/pmqs/IO-Compress/commit/68db44076f4c1a86a2ffe53a958eac6cabaf72e2.patch","https://metacpan.org/release/PMQS/IO-Compress-2.220/changes","http://www.openwall.com/lists/oss-security/2026/05/27/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48959","description":"IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward.\n\nfastForward() compares length $offset (the digit count of the offset, 1 to 19) against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes per iteration.\n\nExtracting a named entry from an attacker supplied zip via IO::Uncompress::Unzip->new($zip, Name => $target) drives a per-byte read loop scaling with the entry's compressed size, up to the non-Zip64 4 GiB cap."}]}],"grade":"F","score":"0.00","as_of":"2026-10-09T08:02:40.830Z","grype_db_version":"2026-10-09T06:32:32.000Z"}